LunaCycle

Family task management with lunar rhythm integration. Deploys as a Bun API server with a React frontend, served through Caddy, authenticated via Authentik OIDC.

Development

bun install
bun run dev          # web + server in parallel
bun run test:unit    # unit tests

Building a Release Package (.netapp)

LunaCycle is deployed via Celilo as a .netapp module package.

bun run netapp

This runs celilo package . --output lunacycle.netapp, which:

1. Stages source via bun pm pack (respecting the files field in package.json)
2. Runs the full build: bun install && bun run build
3. Packages artifacts + Celilo module files into lunacycle.netapp

When to rebuild: Any time you change server code, client code, Ansible roles, or Celilo hook scripts.

You do NOT need to rebuild the standard module netapps (namecheap, greenwave, iptables, caddy, authentik) — those are managed by the infra repo and baked into the @celilo/e2e Docker image.

E2E Deployment Tests

Tests run in a simulated Docker network (DNS, firewalls, ACME server, target machines) provided by @celilo/e2e.

Prerequisites

• Colima running: colima start
• Docker images built (once per machine, or after infra changes):

cele2e build

This packages the standard Celilo modules and bakes them into the management Docker image. Only needed again if you update @celilo/e2e or the infra repo's standard modules.

Running Tests

Fresh run (builds full network from scratch, ~10 min):

bun run netapp
cele2e run --keep deploy

Fast iteration (reuses existing network, ~2-3 min):

bun run netapp
cele2e run --keep --reuse deploy

Check if a reusable network exists:

cele2e status

Tear down when done:

cele2e down

What the deploy test covers

1. Build — lunacycle.netapp exists (fail fast if you forgot bun run netapp)
2. Prerequisites — deploys the full supporting stack into the simulated network:
   • namecheap (DNS registrar)
   • greenwave + iptables (firewalls)
   • caddy (reverse proxy / TLS)
   • authentik (identity provider)
3. Lunacycle deployment — Ansible installs binary + systemd service
4. Infrastructure checks — binary present, service running, Caddy routes registered, static assets uploaded
5. Authentication flow — full PKCE login:
   • config.js has resolved URLs (catches $self:primary_domain regressions)
   • Authentik has the lunacycle-web OIDC client registered
   • Test user lunacycle_admin exists
   • Complete authorization code → token exchange → protected API call

Default test credentials

Field	Value
Username	lunacycle_admin
Password	lunacycle-rules
Domain	iamtheinternet.org (simulated)
Caddy	https://www.iamtheinternet.org
Authentik	https://auth.iamtheinternet.org

These are e2e-only test credentials — not used in production.

Updating the standard module images

If you change something in the infra repo's standard modules (caddy, authentik, etc.) and need to test it:

cd ~/hobby/infra/packages/e2e
cele2e build          # rebuilds all images with updated netapps

Or publish a new @celilo/e2e version from infra and pnpm install here.

Celilo Module Structure

manifest.yml              — Celilo module manifest
celilo/
  scripts/
    setup-web.ts          — on_install: registers Caddy routes, uploads assets, registers OIDC client
    health-check.ts       — health_check: SSH checks on the deployed container
    backup.ts             — on_backup: database backup
    restore.ts            — on_restore: database restore
  terraform/
    main.tf.tpl           — LXC container definition
    outputs.tf.tpl        — Terraform outputs
  ansible/
    playbook.yml.tpl      — Ansible playbook
    roles/lunacycle/      — Server install + migration roles
e2e/
  tests/deploy.test.ts    — Deployment + auth integration tests

Production Deployment

Deployed and managed via Celilo on the home lab. See the infra repo for architecture details.

# On the ops machine:
celilo module deploy lunacycle