Innovation DMZ · West Europe
ATSC-FortressOfSolitude
innovation.atsc.global
Where new ideas get a URL, and where CI jobs run. The Lab hosts prototypes and demos; the Forge runs GitHub Actions jobs in single-use containers.
What runs here
- Lab: one compose project, network and Caddy site per project
- Forge: nine single-use GitHub Actions runner slots across four repos
- Separate rootless Docker daemons for the Lab and the Forge
Still to deploy
7 of 18 done
- Done: Server built in West Europe, with no root Docker daemon1 Oct 2026
- Done: IP4X server baseline: data disk on /data, swap, capped logs, Caddy with security headers, health probe1 Oct 2026
- Done: Lab and Forge users, each with its own rootless Docker, capped at 10 GiB and 20 GiB1 Oct 2026
- Done: Forge runner manager installed1 Oct 2026
- Done: Ports 80 and 443 open to the internet
- Done: DNS: innovation.atsc.global points at this server
- Done: HTTPS certificate for innovation.atsc.global
- To do: Key Vault for the GitHub App keys, read with this server’s identity
- To do: Monitoring agent sending sign-in and sudo logs to the capped log workspace
- To do: GitHub Apps in both organisations, with their keys in Key Vault
- To do: Runner image built in the Forge
- To do: Forge runners started
- To do: IP4X jobs moved here; the old runner stops after three green days
- To do: VentureCraft and DigitalFactory jobs moved here; their deploys on GitHub-hosted runners
- To do: Riddler jobs moved here; desktop-agent jobs on windows-latest
- To do: Laptop runners unregistered and the secrets they could read rotated
- To do: First Lab tenant: VentureCraft staging
- To do: Lab register: each project’s hostname, sign-in and expiry date