pvarki · github-actions · Dec 7, 2025
diff --git a/.outline-sync.json b/.outline-sync.json
@@ -18,17 +18,13 @@
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/contributing/00-who-are-we.md": "747223f36677931db50fa7e539dafecb01a10834",
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/contributing/01-the-stack.md": "5b18c75e6ee188adb465a1c2d2fab4024eb714f6",
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/contributing/03-best-practices.md": "197df8c11f46748b758a0aea1c4805020c57c7fc",
-    "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/contributing/04-deploy-app-release-process/index.md": "a8aa2e7e532fdb97fe0be8e8307f04684e1aab3a",
-    "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/contributing/04-deploy-app-release-process/1-submodule-development-process.md": "8c51a0966a71ae734e80472ca0b04685cb0e8f1f",
-    "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/contributing/04-deploy-app-release-process/2-submodule-merge-process.md": "6c5a719524dd6bba823e8dbe9ed5b56805948bd7",
-    "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/contributing/04-deploy-app-release-process/3-integration-repo-merge-process.md": "5777b11945f58798f67605573b544ff23e101ced",
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/contributing/05-bugs-vulns.md": "6168d833ad91d07374415452db4d9ea3b263c5dd",
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/contributing/06-contribution-agreement.md": "c71da81dea6d82f059a2365abe91b62178551461",
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/specs/01-deploy-app/index.md": "a2a7b6e303bf3eacdb0cbda40f33a3a786e58c98",
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/specs/03-battlelog.md": "030d71cae9eb93e9c133ea13a7380e935a211377",
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/roadmap/01-pvarki.md": "73af6b939f4c6cd5447991cc81aa947354bf449a",
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/roadmap/02-deploy-app.md": "30fdf62740d3790c129bcdac2220c809bda61d3b",
-    "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/roadmap/03-tak.md": "176f18e80b5b57b97a728da0cc5842f70bc985d4",
+    "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/roadmap/03-tak.md": "0bced3136be8f5be3714def62f408dfaf5e1c227",
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/setupguide/preparations.md": "a7473d176bc68d8ea14943da2870dd82d0c714c6",
     "/Users/bg/PVARKI-projekti/esitesivu/Docusaurus-docs/docs/dev/specs/01-deploy-app/00-integration-spec-overview.md": "77e40364b86e342ec4009b0d8c0afe7e2241c688",
     "/Users/bg/PVARKI-projekti/esitesivu/Docusaurus-docs/docs/dev/specs/01-deploy-app/01-integration-spec-compose.md": "02c7914fe7a9bd784580ca6d2fad006f6b62254b",
@@ -50,6 +46,10 @@
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/specs/01-deploy-app/product-integrations/02-battlelog-integration.md": "23c4753f98a5e99afc145b4919a2b1afd024fde6",
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/specs/01-deploy-app/product-integrations/03-mediamtx-video-streaming-integration.md": "494dc44bb2284c614f59326fe5d4255d5fc6b11a",
     "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/specs/01-deploy-app/product-integrations/04-docs-integration.md": "a89388a5ec380ae211273b3ea3383d5956009f62",
-    "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/specs/02-docs.md": "3435a2d908f7f92dc3800bf4bb0f38d7a969b564"
+    "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/specs/02-docs.md": "3435a2d908f7f92dc3800bf4bb0f38d7a969b564",
+    "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/specs/01-deploy-app/deploy-app-release-process/index.md": "e431790720ac93f90c87981c27c5a773ad4e4e98",
+    "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/specs/01-deploy-app/deploy-app-release-process/1-submodule-development-process.md": "8c51a0966a71ae734e80472ca0b04685cb0e8f1f",
+    "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/specs/01-deploy-app/deploy-app-release-process/2-submodule-merge-process.md": "6c5a719524dd6bba823e8dbe9ed5b56805948bd7",
+    "/home/runner/work/Docusaurus-docs/Docusaurus-docs/docs/dev/specs/01-deploy-app/deploy-app-release-process/3-integration-repo-merge-process.md": "5777b11945f58798f67605573b544ff23e101ced"
   }
 }
diff --git a/docs/dev/integrationrepo/index.md b/docs/dev/integrationrepo/index.md
@@ -4,6 +4,12 @@ title: "Repositories & README’s"
 
 Below are the integration repo versions:
 
+- [1.15.2](./v/1.15.2/index.md)
+- [1.15.1](./v/1.15.1/index.md)
+- [1.15.0](./v/1.15.0/index.md)
+- [1.14.0](./v/1.14.0/index.md)
+- [1.13.0](./v/1.13.0/index.md)
+- [1.12.1](./v/1.12.1/index.md)
 - [1.12.0](./v/1.12.0/index.md)
 - [1.11.1](./v/1.11.1/index.md)
 - [1.11.0](./v/1.11.0/index.md)
@@ -18,9 +24,3 @@ Below are the integration repo versions:
 - [1.6.0](./v/1.6.0/index.md)
 - [1.5.1](./v/1.5.1/index.md)
 - [1.5.0](./v/1.5.0/index.md)
-- [1.4.1](./v/1.4.1/index.md)
-- [1.4.0](./v/1.4.0/index.md)
-- [1.3.0](./v/1.3.0/index.md)
-- [1.2.1](./v/1.2.1/index.md)
-- [1.2.0](./v/1.2.0/index.md)
-- [1.1.1](./v/1.1.1/index.md)
diff --git a/docs/dev/integrationrepo/v/1.10.0/_category_.json b/docs/dev/integrationrepo/v/1.10.0/_category_.json
@@ -1,4 +1,4 @@
 {
   "label": "1.10.0",
-  "position": 5
+  "position": 11
 }
diff --git a/docs/dev/integrationrepo/v/1.10.0/submodules/api.md b/docs/dev/integrationrepo/v/1.10.0/submodules/api.md
@@ -215,3 +215,26 @@ Remember to activate your virtualenv whenever working on the repo, this
 is needed because pylint and mypy pre-commit hooks use the "system"
 python for now (because reasons).
 
+## Pipeline public-key for JWT verification
+
+Pipeline can pass a public-key whose private key is used to sign JWTs to
+access RM API with environment variable
+<span class="title-ref">\$EXTERNAL_JWT_PUBKEY_B64</span>. The public key
+should be base64-encoded to avoid issues with newlines and such when the
+key is passed through the system.
+
+Export a previously generated key to the container:
+
+    export EXTERNAL_JWT_PUBKEY_B64=$(cat ~/p/jwt-test/private_key.key | base64)
+    rmlocal up --build
+
+Generate a token and set it in the environment
+<span class="title-ref">TOKEN</span>. The JWT should have the claim
+<span class="title-ref">anon_admin_session</span> set to
+<span class="title-ref">true</span>. Use the token in the API call:
+
+    curl -X POST --insecure https://localmaeher.dev.pvarki.fi:4439/\
+    api/v1/token/code/generate -H 'Content-type: application/json' \
+    -H "Authorization: Bearer $TOKEN" \
+    -d '&#123;"claims": &#123;"anon_admin_session": true&#125;&#125;'
+
diff --git a/docs/dev/integrationrepo/v/1.10.0/submodules/battlelog.md b/docs/dev/integrationrepo/v/1.10.0/submodules/battlelog.md
@@ -6,7 +6,7 @@ title: "pvarki/typescript-liveloki-app – README"
 > **Repo:** git@github.com:pvarki/typescript-liveloki-app.git  
 > **Browse at this commit:** https://github.com/pvarki/typescript-liveloki-app/tree/197f6b74507fb81fc442fa1522088f0cb7ed3939
 
-# livelogi
+# BattleLog
 
 ## Install
 

diff --git a/docs/dev/integrationrepo/v/1.10.0/submodules/fpintegration.md b/docs/dev/integrationrepo/v/1.10.0/submodules/fpintegration.md
@@ -8,7 +8,8 @@ title: "pvarki/python-rasenmaeher-rmfpapi – README"
 
 # rmfpapi
 
-Fake product RASENMAEHER integration API service
+Fake product RASENMAEHER integration API service. Serves as a reference
+implementation for a new integration into the deploy app ecosystem.
 
 ## Docker
 
@@ -80,10 +81,10 @@ remember to change that architecture tag to arm64 if building on ARM:
 
 TLDR:
 
-- Create and activate a Python 3.8 virtualenv (assuming
+- Create and activate a Python 3.11 virtualenv (assuming
   virtualenvwrapper):
 
-      mkvirtualenv -p `which python3.8` my_virtualenv
+      mkvirtualenv -p `which python3.11` my_virtualenv
 
 - change to a branch:
 

diff --git a/docs/dev/integrationrepo/v/1.10.1/_category_.json b/docs/dev/integrationrepo/v/1.10.1/_category_.json
@@ -1,4 +1,4 @@
 {
   "label": "1.10.1",
-  "position": 4
+  "position": 10
 }
diff --git a/docs/dev/integrationrepo/v/1.10.1/submodules/api.md b/docs/dev/integrationrepo/v/1.10.1/submodules/api.md
@@ -215,3 +215,26 @@ Remember to activate your virtualenv whenever working on the repo, this
 is needed because pylint and mypy pre-commit hooks use the "system"
 python for now (because reasons).
 
+## Pipeline public-key for JWT verification
+
+Pipeline can pass a public-key whose private key is used to sign JWTs to
+access RM API with environment variable
+<span class="title-ref">\$EXTERNAL_JWT_PUBKEY_B64</span>. The public key
+should be base64-encoded to avoid issues with newlines and such when the
+key is passed through the system.
+
+Export a previously generated key to the container:
+
+    export EXTERNAL_JWT_PUBKEY_B64=$(cat ~/p/jwt-test/private_key.key | base64)
+    rmlocal up --build
+
+Generate a token and set it in the environment
+<span class="title-ref">TOKEN</span>. The JWT should have the claim
+<span class="title-ref">anon_admin_session</span> set to
+<span class="title-ref">true</span>. Use the token in the API call:
+
+    curl -X POST --insecure https://localmaeher.dev.pvarki.fi:4439/\
+    api/v1/token/code/generate -H 'Content-type: application/json' \
+    -H "Authorization: Bearer $TOKEN" \
+    -d '&#123;"claims": &#123;"anon_admin_session": true&#125;&#125;'
+
diff --git a/docs/dev/integrationrepo/v/1.10.1/submodules/battlelog.md b/docs/dev/integrationrepo/v/1.10.1/submodules/battlelog.md
@@ -6,7 +6,7 @@ title: "pvarki/typescript-liveloki-app – README"
 > **Repo:** git@github.com:pvarki/typescript-liveloki-app.git  
 > **Browse at this commit:** https://github.com/pvarki/typescript-liveloki-app/tree/197f6b74507fb81fc442fa1522088f0cb7ed3939
 
-# livelogi
+# BattleLog
 
 ## Install
 

diff --git a/docs/dev/integrationrepo/v/1.10.1/submodules/fpintegration.md b/docs/dev/integrationrepo/v/1.10.1/submodules/fpintegration.md
@@ -8,7 +8,8 @@ title: "pvarki/python-rasenmaeher-rmfpapi – README"
 
 # rmfpapi
 
-Fake product RASENMAEHER integration API service
+Fake product RASENMAEHER integration API service. Serves as a reference
+implementation for a new integration into the deploy app ecosystem.
 
 ## Docker
 
@@ -80,10 +81,10 @@ remember to change that architecture tag to arm64 if building on ARM:
 
 TLDR:
 
-- Create and activate a Python 3.8 virtualenv (assuming
+- Create and activate a Python 3.11 virtualenv (assuming
   virtualenvwrapper):
 
-      mkvirtualenv -p `which python3.8` my_virtualenv
+      mkvirtualenv -p `which python3.11` my_virtualenv
 
 - change to a branch:
 

diff --git a/docs/dev/integrationrepo/v/1.11.0/_category_.json b/docs/dev/integrationrepo/v/1.11.0/_category_.json
@@ -1,4 +1,4 @@
 {
   "label": "1.11.0",
-  "position": 3
+  "position": 9
 }
diff --git a/docs/dev/integrationrepo/v/1.11.0/submodules/api.md b/docs/dev/integrationrepo/v/1.11.0/submodules/api.md
@@ -215,3 +215,26 @@ Remember to activate your virtualenv whenever working on the repo, this
 is needed because pylint and mypy pre-commit hooks use the "system"
 python for now (because reasons).
 
+## Pipeline public-key for JWT verification
+
+Pipeline can pass a public-key whose private key is used to sign JWTs to
+access RM API with environment variable
+<span class="title-ref">\$EXTERNAL_JWT_PUBKEY_B64</span>. The public key
+should be base64-encoded to avoid issues with newlines and such when the
+key is passed through the system.
+
+Export a previously generated key to the container:
+
+    export EXTERNAL_JWT_PUBKEY_B64=$(cat ~/p/jwt-test/private_key.key | base64)
+    rmlocal up --build
+
+Generate a token and set it in the environment
+<span class="title-ref">TOKEN</span>. The JWT should have the claim
+<span class="title-ref">anon_admin_session</span> set to
+<span class="title-ref">true</span>. Use the token in the API call:
+
+    curl -X POST --insecure https://localmaeher.dev.pvarki.fi:4439/\
+    api/v1/token/code/generate -H 'Content-type: application/json' \
+    -H "Authorization: Bearer $TOKEN" \
+    -d '&#123;"claims": &#123;"anon_admin_session": true&#125;&#125;'
+
diff --git a/docs/dev/integrationrepo/v/1.11.0/submodules/battlelog.md b/docs/dev/integrationrepo/v/1.11.0/submodules/battlelog.md
@@ -6,7 +6,7 @@ title: "pvarki/typescript-liveloki-app – README"
 > **Repo:** git@github.com:pvarki/typescript-liveloki-app.git  
 > **Browse at this commit:** https://github.com/pvarki/typescript-liveloki-app/tree/197f6b74507fb81fc442fa1522088f0cb7ed3939
 
-# livelogi
+# BattleLog
 
 ## Install
 

diff --git a/docs/dev/integrationrepo/v/1.11.0/submodules/fpintegration.md b/docs/dev/integrationrepo/v/1.11.0/submodules/fpintegration.md
@@ -8,7 +8,8 @@ title: "pvarki/python-rasenmaeher-rmfpapi – README"
 
 # rmfpapi
 
-Fake product RASENMAEHER integration API service
+Fake product RASENMAEHER integration API service. Serves as a reference
+implementation for a new integration into the deploy app ecosystem.
 
 ## Docker
 
@@ -80,10 +81,10 @@ remember to change that architecture tag to arm64 if building on ARM:
 
 TLDR:
 
-- Create and activate a Python 3.8 virtualenv (assuming
+- Create and activate a Python 3.11 virtualenv (assuming
   virtualenvwrapper):
 
-      mkvirtualenv -p `which python3.8` my_virtualenv
+      mkvirtualenv -p `which python3.11` my_virtualenv
 
 - change to a branch:
 

diff --git a/docs/dev/integrationrepo/v/1.11.1/_category_.json b/docs/dev/integrationrepo/v/1.11.1/_category_.json
@@ -1,4 +1,4 @@
 {
   "label": "1.11.1",
-  "position": 2
+  "position": 8
 }
diff --git a/docs/dev/integrationrepo/v/1.11.1/submodules/api.md b/docs/dev/integrationrepo/v/1.11.1/submodules/api.md
@@ -215,3 +215,26 @@ Remember to activate your virtualenv whenever working on the repo, this
 is needed because pylint and mypy pre-commit hooks use the "system"
 python for now (because reasons).
 
+## Pipeline public-key for JWT verification
+
+Pipeline can pass a public-key whose private key is used to sign JWTs to
+access RM API with environment variable
+<span class="title-ref">\$EXTERNAL_JWT_PUBKEY_B64</span>. The public key
+should be base64-encoded to avoid issues with newlines and such when the
+key is passed through the system.
+
+Export a previously generated key to the container:
+
+    export EXTERNAL_JWT_PUBKEY_B64=$(cat ~/p/jwt-test/private_key.key | base64)
+    rmlocal up --build
+
+Generate a token and set it in the environment
+<span class="title-ref">TOKEN</span>. The JWT should have the claim
+<span class="title-ref">anon_admin_session</span> set to
+<span class="title-ref">true</span>. Use the token in the API call:
+
+    curl -X POST --insecure https://localmaeher.dev.pvarki.fi:4439/\
+    api/v1/token/code/generate -H 'Content-type: application/json' \
+    -H "Authorization: Bearer $TOKEN" \
+    -d '&#123;"claims": &#123;"anon_admin_session": true&#125;&#125;'
+
diff --git a/docs/dev/integrationrepo/v/1.11.1/submodules/battlelog.md b/docs/dev/integrationrepo/v/1.11.1/submodules/battlelog.md
@@ -6,7 +6,7 @@ title: "pvarki/typescript-liveloki-app – README"
 > **Repo:** git@github.com:pvarki/typescript-liveloki-app.git  
 > **Browse at this commit:** https://github.com/pvarki/typescript-liveloki-app/tree/197f6b74507fb81fc442fa1522088f0cb7ed3939
 
-# livelogi
+# BattleLog
 
 ## Install
 

diff --git a/docs/dev/integrationrepo/v/1.11.1/submodules/fpintegration.md b/docs/dev/integrationrepo/v/1.11.1/submodules/fpintegration.md
@@ -8,7 +8,8 @@ title: "pvarki/python-rasenmaeher-rmfpapi – README"
 
 # rmfpapi
 
-Fake product RASENMAEHER integration API service
+Fake product RASENMAEHER integration API service. Serves as a reference
+implementation for a new integration into the deploy app ecosystem.
 
 ## Docker
 
@@ -80,10 +81,10 @@ remember to change that architecture tag to arm64 if building on ARM:
 
 TLDR:
 
-- Create and activate a Python 3.8 virtualenv (assuming
+- Create and activate a Python 3.11 virtualenv (assuming
   virtualenvwrapper):
 
-      mkvirtualenv -p `which python3.8` my_virtualenv
+      mkvirtualenv -p `which python3.11` my_virtualenv
 
 - change to a branch:
 

diff --git a/docs/dev/integrationrepo/v/1.12.0/_category_.json b/docs/dev/integrationrepo/v/1.12.0/_category_.json
@@ -1,4 +1,4 @@
 {
   "label": "1.12.0",
-  "position": 1
+  "position": 7
 }
diff --git a/docs/dev/integrationrepo/v/1.12.0/submodules/api.md b/docs/dev/integrationrepo/v/1.12.0/submodules/api.md
@@ -215,3 +215,26 @@ Remember to activate your virtualenv whenever working on the repo, this
 is needed because pylint and mypy pre-commit hooks use the "system"
 python for now (because reasons).
 
+## Pipeline public-key for JWT verification
+
+Pipeline can pass a public-key whose private key is used to sign JWTs to
+access RM API with environment variable
+<span class="title-ref">\$EXTERNAL_JWT_PUBKEY_B64</span>. The public key
+should be base64-encoded to avoid issues with newlines and such when the
+key is passed through the system.
+
+Export a previously generated key to the container:
+
+    export EXTERNAL_JWT_PUBKEY_B64=$(cat ~/p/jwt-test/private_key.key | base64)
+    rmlocal up --build
+
+Generate a token and set it in the environment
+<span class="title-ref">TOKEN</span>. The JWT should have the claim
+<span class="title-ref">anon_admin_session</span> set to
+<span class="title-ref">true</span>. Use the token in the API call:
+
+    curl -X POST --insecure https://localmaeher.dev.pvarki.fi:4439/\
+    api/v1/token/code/generate -H 'Content-type: application/json' \
+    -H "Authorization: Bearer $TOKEN" \
+    -d '&#123;"claims": &#123;"anon_admin_session": true&#125;&#125;'
+
diff --git a/docs/dev/integrationrepo/v/1.12.0/submodules/battlelog.md b/docs/dev/integrationrepo/v/1.12.0/submodules/battlelog.md
@@ -6,7 +6,7 @@ title: "pvarki/typescript-liveloki-app – README"
 > **Repo:** git@github.com:pvarki/typescript-liveloki-app.git  
 > **Browse at this commit:** https://github.com/pvarki/typescript-liveloki-app/tree/197f6b74507fb81fc442fa1522088f0cb7ed3939
 
-# livelogi
+# BattleLog
 
 ## Install
 

diff --git a/docs/dev/integrationrepo/v/1.12.0/submodules/fpintegration.md b/docs/dev/integrationrepo/v/1.12.0/submodules/fpintegration.md
@@ -8,7 +8,8 @@ title: "pvarki/python-rasenmaeher-rmfpapi – README"
 
 # rmfpapi
 
-Fake product RASENMAEHER integration API service
+Fake product RASENMAEHER integration API service. Serves as a reference
+implementation for a new integration into the deploy app ecosystem.
 
 ## Docker
 
@@ -80,10 +81,10 @@ remember to change that architecture tag to arm64 if building on ARM:
 
 TLDR:
 
-- Create and activate a Python 3.8 virtualenv (assuming
+- Create and activate a Python 3.11 virtualenv (assuming
   virtualenvwrapper):
 
-      mkvirtualenv -p `which python3.8` my_virtualenv
+      mkvirtualenv -p `which python3.11` my_virtualenv
 
 - change to a branch: