Daily Worklog: 2026-02-12 (Thursday)

┌─────────────────────────────────────────────────────────────────┐
│                    SINGLE SOURCE OF TRUTH                       │
│                                                                 │
│   domus-antora-ui (GitHub - private)                            │
│        │                                                        │
│        ▼  (auto-deploy on push)                                 │
│   Cloudflare Pages (domus-ui project)                           │
│        │                                                        │
│        ▼                                                        │
│   ui.domusdigitalis.dev/ui-bundle.zip                          │
│        │  (Protected by Cloudflare Access)                      │
│        │                                                        │
└────────┼────────────────────────────────────────────────────────┘
         │
         │  Service Token Authentication
         ▼
┌─────────────────────────────────────────────────────────────────┐
│   DOCUMENTATION SITES                                           │
│                                                                 │
│   domus-docs (aggregator) ──► docs.domusdigitalis.dev          │
│     ├── domus-infra-ops                                         │
│     ├── domus-ise-linux                                         │
│     ├── domus-ise-windows                                       │
│     ├── domus-ise-ops                                           │
│     ├── domus-netapi-docs                                       │
│     ├── domus-secrets-ops                                       │
│     ├── domus-identity-ops                                      │
│     ├── domus-linux-ops                                         │
│     ├── domus-python                                            │
│     ├── domus-captures                                          │
│     └── domus-automation-ops                                    │
│                                                                 │
└─────────────────────────────────────────────────────────────────┘

#!/bin/bash
# Builds the domus-docs Antora site with:
#   1. Fetches UI bundle from ui.domusdigitalis.dev (Cloudflare Access)
#   2. Injects GitHub token into playbook URLs for private repo access
#   3. Runs Antora build

# Check for required tokens
if [ -z "$CF_ACCESS_CLIENT_ID" ] || [ -z "$CF_ACCESS_CLIENT_SECRET" ]; then
    echo "ERROR: CF_ACCESS_CLIENT_ID and CF_ACCESS_CLIENT_SECRET required"
    exit 1
fi

# Fetch UI bundle with Cloudflare Access auth
curl -sfo ui-bundle.zip \
    -H "CF-Access-Client-Id: $CF_ACCESS_CLIENT_ID" \
    -H "CF-Access-Client-Secret: $CF_ACCESS_CLIENT_SECRET" \
    https://ui.domusdigitalis.dev/ui-bundle.zip

# Run Antora build
npx antora --quiet antora-playbook.yml

ui:
  bundle:
    # Domus Enterprise UI Bundle (fetched by build.sh with Access auth)
    url: ./ui-bundle.zip
    snapshot: true

# Unauthenticated access blocked
curl -sI https://ui.domusdigitalis.dev/ui-bundle.zip
# HTTP/2 302 → Cloudflare Access login

# Docs site protected
curl -sI https://docs.domusdigitalis.dev/
# HTTP/2 302 → Cloudflare Access login

Fetching UI bundle from ui.domusdigitalis.dev...
UI bundle downloaded
Injecting credentials into playbook...
Building Antora site...
Build complete: build/site/index.html

cd ~/atelier/_bibliotheca/domus-antora-ui
# Edit src/css/ or src/js/
npm run build  # Test locally
git add -A && git commit -m "feat(ui): Description"
git push
# Cloudflare Pages auto-deploys

cd ~/atelier/_bibliotheca/domus-docs
git commit --allow-empty -m "chore: Trigger rebuild for UI update"
git push

domus-siem-ops/
├── .claude/CLAUDE.md
├── docs/asciidoc/
│   ├── antora.yml              # Environment attributes (no hardcoded IPs)
│   └── modules/ROOT/
│       ├── nav.adoc
│       └── pages/
│           ├── index.adoc
│           ├── concepts/siem-fundamentals.adoc
│           ├── qradar/
│           │   ├── aql-reference.adoc
│           │   ├── queries/{threat-detection,network-flows,authentication}.adoc
│           │   ├── hunts/{vnc-hunt,evil-twin-hunt,suspicious-endpoint}.adoc
│           │   ├── playbooks/{incident-response,threat-hunting}.adoc
│           │   └── reference/{aql-functions,device-types,field-reference}.adoc
│           ├── sentinel/kql-reference.adoc
│           ├── wazuh/qradar-mapping.adoc
│           ├── splunk/spl-reference.adoc
│           └── migrations/qradar-to-sentinel.adoc

# Create directory structure
mkdir -p ~/atelier/_bibliotheca/domus-siem-ops/{.claude,docs/asciidoc/modules/ROOT/{pages/{concepts,qradar/{queries,hunts,playbooks,reference},sentinel,wazuh,splunk,migrations},images}}

# Initialize git
cd ~/atelier/_bibliotheca/domus-siem-ops
git init && git branch -m main
git add -A
git commit --no-gpg-sign -m "feat: Initial domus-siem-ops structure"

# Fix remotes (following domus-docs pattern)
git remote remove origin
git remote add origin git@github.com:EvanusModestus/domus-siem-ops.git
git remote add gitlab git@gitlab.com:EvanusModestus/domus-siem-ops.git
git remote add gitea git@gitea-01.inside.domusdigitalis.dev:evanusmodestus/domus-siem-ops.git

# Push to all remotes
git push -u origin main
git push -u gitlab main
git push -u gitea main

bash <<'EOF'
cd ~/atelier/_bibliotheca/domus-siem-ops
git remote remove origin
git remote add origin git@github.com:EvanusModestus/domus-siem-ops.git
git remote add gitlab git@gitlab.com:EvanusModestus/domus-siem-ops.git
git remote add gitea git@gitea-01.inside.domusdigitalis.dev:evanusmodestus/domus-siem-ops.git
git remote -v
EOF

git commit -m "refactor(linux-client): Convert hardcoded values to attributes

- domain-join.adoc: Use \{ad-dc-ip\} and \{ad-dc-hostname\}
- monitoring.adoc: Use \{mgmt-network\} and \{zabbix-server\}
- wpa-supplicant-wifi.adoc: Use \{wlc-ip\} and \{vlan-data-gateway\}
- antora.yml: Add mgmt-network and zabbix-server attributes"