operational deployment

.omo/run-continuation/ses_f6341e990ffeuDX0xnVFWQQ8fS.json

@@ -0,0 +1,10 @@
+{
+  "sessionID": "ses_f6341e990ffeuDX0xnVFWQQ8fS",
+  "updatedAt": "2026-09-13T22:17:31.684Z",
+  "sources": {
+    "background-task": {
+      "state": "idle",
+      "updatedAt": "2026-09-13T22:17:31.684Z"
+    }
+  }
+}

.omo/run-continuation/ses_f63e23ebcffe7Q6sJKCl9W8sFt.json

@@ -1,10 +1,10 @@
 {
   "sessionID": "ses_f63e23ebcffe7Q6sJKCl9W8sFt",
-  "updatedAt": "2026-09-13T20:00:12.252Z",
+  "updatedAt": "2026-09-13T21:32:58.318Z",
   "sources": {
     "background-task": {
       "state": "idle",
-      "updatedAt": "2026-09-13T20:00:12.252Z"
+      "updatedAt": "2026-09-13T21:32:58.318Z"
     }
   }
 }

inventory.ini

@@ -7,7 +7,7 @@
 # Replace YOUR_SSH_PASSWORD with the real password. Keep the file
 # out of git / chmod 600 it, or encrypt with ansible-vault:
 #   ansible-vault encrypt inventory.ini
-stoat-demo ansible_host=stoat-demo ansible_user=fedora ansible_ssh_pass=VjocLlmw6faSdM
+stoat-demo
 
 [servers:vars]
 # Elevate privileges (the playbook already sets become: true,

roles/stoat/tasks/stoat.yml

@@ -24,6 +24,27 @@
     path: "{{ stoat_install_dir }}/generate_config.sh"
     mode: "0755"
 
+# Upstream compose.yml still references docker.io/minio/minio and
+# docker.io/minio/mc, which no longer exist on Docker Hub (the pulls are
+# denied, so `podman-compose up` hangs and api/events/etc. never start).
+# MinIO's official images live on quay.io - rewrite the refs.
+- name: Point MinIO images at quay.io (docker.io/minio/* is gone)
+  ansible.builtin.replace:
+    path: "{{ stoat_install_dir }}/compose.yml"
+    regexp: 'docker\.io/minio/(minio|mc)'
+    replace: 'quay.io/minio/\1'
+
+# autumn depends on createbuckets, a one-shot that exits 0 after creating
+# the MinIO buckets. podman-compose treats `condition: service_started` as
+# "container is running", so it waits forever on the exited one-shot and
+# `podman-compose up` never completes (autumn/pushd stay Created). Use the
+# service_completed_successfully condition instead.
+- name: Fix autumn dependency on the createbuckets one-shot
+  ansible.builtin.replace:
+    path: "{{ stoat_install_dir }}/compose.yml"
+    regexp: '(createbuckets:\n\s+condition: )service_started'
+    replace: '\1service_completed_successfully'
+
 # The compose file bind-mounts these directories; create them up
 # front so podman-compose does not fail on missing sources.
 - name: Create data directories referenced by compose bind mounts