Refresh MEV ops runbooks

docs/04-configuration/MEV_CONTROL_LAN_BRINGUP_CHECKLIST.md

@@ -62,12 +62,12 @@ Default CT identity:
 The provisioner creates an unprivileged Debian 12 CT with:
 
 - `16` vCPU
-- `32 GiB` RAM
-- `8 GiB` swap
+- `72 GiB` RAM
+- `0 GiB` swap by default
 - `200 GiB` rootfs
 - `nesting=1,keyctl=1`
 
-These defaults are intentionally generous for the first contained deployment and can be tuned later.
+These defaults reflect the current stable allocation for CT `2421` after live pressure remediation. Keep the backend on `72 GiB` unless host capacity becomes constrained enough to justify a deliberate retune.
 
 ## 3. Paths inside the backend CT
 

scripts/deployment/provision-mev-control-backend-lxc.sh

@@ -44,8 +44,8 @@ else
 set -euo pipefail
 pct create ${VMID} ${TEMPLATE_CT} \\
   --hostname ${HOSTNAME_CT} \\
-  --memory 32768 \\
-  --swap 8192 \\
+  --memory 73728 \\
+  --swap 0 \\
   --cores 16 \\
   --rootfs ${STORAGE}:200 \\
   --net0 name=eth0,bridge=${NETWORK},ip=${IP_CT}/24,gw=${GATEWAY} \\

scripts/deployment/run-mev-post-deploy-cutover-ct2421.sh

@@ -157,7 +157,7 @@ PATCH_CMD+=(--apply)
 CT_VERIFY_CMD=$(cat <<EOF
 set -euo pipefail
 printf '== env ==\n'
-grep -E '^(MEV_CONFIG|MEV_ADMIN_PORT|MEV_SUPERVISOR_PORT|MEV_SUPERVISOR_URL|MEV_SUBMIT_DISABLED|MEV_ADMIN_API_KEY|MEV_EXECUTOR_PRIVATE_KEY)=' /etc/mev-platform/backend.env || true
+grep -E '^(MEV_CONFIG|MEV_ADMIN_PORT|MEV_SUPERVISOR_PORT|MEV_SUPERVISOR_URL|MEV_SUPERVISOR_BIN_DIR|MEV_SUBMIT_DISABLED|MEV_ADMIN_API_KEY|MEV_EXECUTOR_PRIVATE_KEY)=' /etc/mev-platform/backend.env || true
 printf '\n== services ==\n'
 systemctl restart mev-supervisor.service
 systemctl restart mev-admin-api.service

scripts/nginx-proxy-manager/configure-npmplus-domains.js

@@ -52,7 +52,7 @@ const DOMAINS = [
   { domain: 'd-bis.org', target: 'http://192.168.11.54:3001', websocket: false }, // Gov Portals DBIS VMID 7804
   { domain: 'www.d-bis.org', target: 'http://192.168.11.54:3001', websocket: false },
   { domain: 'admin.d-bis.org', target: 'http://192.168.11.130:80', websocket: false },
-  { domain: 'core.d-bis.org', target: 'http://192.168.11.155:3000', websocket: false },
+  { domain: 'core.d-bis.org', target: 'http://192.168.11.130:80', websocket: false }, // VMID 10130: dbis-frontend
   { domain: 'dbis-admin.d-bis.org', target: 'http://192.168.11.130:80', websocket: false }, // VMID 10130: dbis-frontend
   { domain: 'dbis-api.d-bis.org', target: 'http://192.168.11.155:3000', websocket: false }, // VMID 10150: dbis-api-primary
   { domain: 'dbis-api-2.d-bis.org', target: 'http://192.168.11.156:3000', websocket: false }, // VMID 10151: dbis-api-secondary