Document the sync restart and health check states sync-prod-to-dev.sh restarts production after a failed or interrupted sync, and healthcheck-multi.sh reports crash-looping and failed units without restarting them, once per outage (PR #196).
Document the deploy health check deploy-binary.sh and deploy.sh now wait for each restarted instance to report healthy and exit 1 naming the ones that do not (PR #195).
Document two-factor authentication and the password gates Add two-factor authentication (authenticator apps with recovery codes): OCMS_MFA_KEY and OCMS_REQUIRE_MFA, the two-step sign-in, the account security page, administrator and command-line resets, recovery after the key changes, and demo mode leaving it off. Document the acting administrator's password for account-handing user changes and second-factor resets, the password needed to activate DB Manager, import overwrites never changing the admin role, the new event log entries, and Go 1.27.3 as the minimum version. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Document deploy-multi failures and delete events Describe how deploy-multi.sh handles a site that fails to stop or start, that page.published is sent once when a manual and a scheduled publish race, and that media.deleted is sent when files stay on disk.
Document compose, checkbox, webhook and deploy fixes Describe the compose variables a production container needs, the checkbox storage and checkedOption, the events REST writes and scheduled publishing send, the new deploy order, and the category form's position.
Correct wiki pages against the code Fix statements the code contradicts across the module, security, configuration, deployment and reference pages, and document OCMS_ENV_FILE and the site.mk env guard.
Document custom module rules and multi-site builds Template functions are for built-in modules only; a custom module must expose data over a route instead. Adds the multi-site section covering site.mk, additive module sync, the shared-core lock and .owners. Corrects the deploy -v examples to the instance directory, and expands the module.Context table to all 11 fields.
Drop URI from Plesk proxy_pass snippet The documented snippet gave proxy_pass a URI, which makes nginx rebuild the upstream request from the decoded path. Any URL with percent-encoded characters then reached the app malformed and returned 400 — it hit 20 of 54 media files on tunisie.ru. Matches the fix already in scripts/deploy/setup-site.sh (#160), and adds a curl one-liner that distinguishes the two cases without reading config.
Document binary release install and bootstrap Mirror the main-repo docs: prebuilt release-archive install, the one-time seeded admin bootstrap, no-cgo builds, and removal of the libvips prerequisite.
Document systemd drop-in recovery and reboot fix Mirror the scripts/deploy/README.md additions from the main repo: - "Systemd Drop-In Missing" recovery with drop-in template. - "Sites Down After Reboot" diagnosis and bulk-enable one-liner. - Note that healthcheck-multi.sh only restarts active units.
Add comprehensive wiki documentation