From 6fa2592a9cc03ebced5feb6357338f0ab09ad479 Mon Sep 17 00:00:00 2001 From: Ryan Barlow <7389646+ryanbarlow97@users.noreply.github.com> Date: Fri, 16 Oct 2026 10:43:24 +0000 Subject: [PATCH] docs(provincesystem): describe server files through the AMP API Co-Authored-By: Claude Opus 5.5 --- .../docs/integrations/servers.md | 20 +++++++++++++++++-- 1 file changed, 18 insertions(+), 2 deletions(-) diff --git a/projects/ProvinceSystem/docs/integrations/servers.md b/projects/ProvinceSystem/docs/integrations/servers.md index 1a0ee55..d0b805b 100644 --- a/projects/ProvinceSystem/docs/integrations/servers.md +++ b/projects/ProvinceSystem/docs/integrations/servers.md @@ -262,8 +262,24 @@ cutover backup until the migrated controls have been checked. The helper uses the AMP API as the `TFWeb` service account once `/etc/tfmc-server-control/amp-login.json` exists. It sends console commands -through the API and takes Main's countdown backup. Without the file, console -commands go through the sudo wrapper and no backup is taken. The administrator +through the API, takes Main's countdown backup and handles every server file +through AMP's file manager: + +- Plugin jars, the Maintenance config and the newest logs are copied into a + private mirror under `/var/lib/tfmc-server-control/state/mirror/` (about + 350 MB). A jar is downloaded again only when AMP reports a different MD5, and + the plan checks hash the mirror's bytes. +- Installs upload each release as `plugins/.control-`, compare AMP's MD5 + with the verified bytes, rename it to the release name and move the old jar + to the instance's `.trash`. A failed install restores the recorded old jars + the same way. +- AMP reports only modified times, so Dev evidence compares a jar's modified + time with Dev's startup. + +Without the file, console commands go through the sudo wrapper, files go +through the bind mounts and no backup is taken. Once restarts work through +the API, the administrator can remove the wrapper, its sudoers entry, the +instance ACLs and the unit's bind mounts. The administrator creates the file once from the account password in `ryan`'s `~/.config/amp-tfweb`: