From 5557685a632a7d4f23ca278ad5f5c199eaafedce Mon Sep 17 00:00:00 2001
From: boxswapper <boxswappers@gmail.com>
Date: Sun, 13 Sep 2026 16:18:43 -0600
Subject: [PATCH] operational deployment

---
 .../ses_f6341e990ffeuDX0xnVFWQQ8fS.json       | 10 +++++++++
 .../ses_f63e23ebcffe7Q6sJKCl9W8sFt.json       |  4 ++--
 inventory.ini                                 |  2 +-
 roles/stoat/tasks/stoat.yml                   | 21 +++++++++++++++++++
 4 files changed, 34 insertions(+), 3 deletions(-)
 create mode 100644 .omo/run-continuation/ses_f6341e990ffeuDX0xnVFWQQ8fS.json

diff --git a/.omo/run-continuation/ses_f6341e990ffeuDX0xnVFWQQ8fS.json b/.omo/run-continuation/ses_f6341e990ffeuDX0xnVFWQQ8fS.json
new file mode 100644
index 0000000..59139c2
--- /dev/null
+++ b/.omo/run-continuation/ses_f6341e990ffeuDX0xnVFWQQ8fS.json
@@ -0,0 +1,10 @@
+{
+  "sessionID": "ses_f6341e990ffeuDX0xnVFWQQ8fS",
+  "updatedAt": "2026-09-13T22:17:31.684Z",
+  "sources": {
+    "background-task": {
+      "state": "idle",
+      "updatedAt": "2026-09-13T22:17:31.684Z"
+    }
+  }
+}
\ No newline at end of file
diff --git a/.omo/run-continuation/ses_f63e23ebcffe7Q6sJKCl9W8sFt.json b/.omo/run-continuation/ses_f63e23ebcffe7Q6sJKCl9W8sFt.json
index 88ce93d..730d1aa 100644
--- a/.omo/run-continuation/ses_f63e23ebcffe7Q6sJKCl9W8sFt.json
+++ b/.omo/run-continuation/ses_f63e23ebcffe7Q6sJKCl9W8sFt.json
@@ -1,10 +1,10 @@
 {
   "sessionID": "ses_f63e23ebcffe7Q6sJKCl9W8sFt",
-  "updatedAt": "2026-09-13T20:00:12.252Z",
+  "updatedAt": "2026-09-13T21:32:58.318Z",
   "sources": {
     "background-task": {
       "state": "idle",
-      "updatedAt": "2026-09-13T20:00:12.252Z"
+      "updatedAt": "2026-09-13T21:32:58.318Z"
     }
   }
 }
\ No newline at end of file
diff --git a/inventory.ini b/inventory.ini
index a5e8cfa..04c1b34 100644
--- a/inventory.ini
+++ b/inventory.ini
@@ -7,7 +7,7 @@
 # Replace YOUR_SSH_PASSWORD with the real password. Keep the file
 # out of git / chmod 600 it, or encrypt with ansible-vault:
 #   ansible-vault encrypt inventory.ini
-stoat-demo ansible_host=stoat-demo ansible_user=fedora ansible_ssh_pass=VjocLlmw6faSdM
+stoat-demo
 
 [servers:vars]
 # Elevate privileges (the playbook already sets become: true,
diff --git a/roles/stoat/tasks/stoat.yml b/roles/stoat/tasks/stoat.yml
index 6530b89..83b631c 100644
--- a/roles/stoat/tasks/stoat.yml
+++ b/roles/stoat/tasks/stoat.yml
@@ -24,6 +24,27 @@
     path: "{{ stoat_install_dir }}/generate_config.sh"
     mode: "0755"
 
+# Upstream compose.yml still references docker.io/minio/minio and
+# docker.io/minio/mc, which no longer exist on Docker Hub (the pulls are
+# denied, so `podman-compose up` hangs and api/events/etc. never start).
+# MinIO's official images live on quay.io - rewrite the refs.
+- name: Point MinIO images at quay.io (docker.io/minio/* is gone)
+  ansible.builtin.replace:
+    path: "{{ stoat_install_dir }}/compose.yml"
+    regexp: 'docker\.io/minio/(minio|mc)'
+    replace: 'quay.io/minio/\1'
+
+# autumn depends on createbuckets, a one-shot that exits 0 after creating
+# the MinIO buckets. podman-compose treats `condition: service_started` as
+# "container is running", so it waits forever on the exited one-shot and
+# `podman-compose up` never completes (autumn/pushd stay Created). Use the
+# service_completed_successfully condition instead.
+- name: Fix autumn dependency on the createbuckets one-shot
+  ansible.builtin.replace:
+    path: "{{ stoat_install_dir }}/compose.yml"
+    regexp: '(createbuckets:\n\s+condition: )service_started'
+    replace: '\1service_completed_successfully'
+
 # The compose file bind-mounts these directories; create them up
 # front so podman-compose does not fail on missing sources.
 - name: Create data directories referenced by compose bind mounts