inference-bot 43f8f8c3fe operator-token-runbook: add the credential rotation policy and reminder
Records the 12-month cadence and the trigger rules agreed in co-op/support#35,
a last-rotated table (first entry: the Open Collective token, rotated
2026-10-27; other rows blank because nothing is recorded), and the account map
behind the credentials. Adds scripts/rotation_due.py, which reads the table and
prints only when a credential is within 30 days of its due date.
2026-11-04 14:36:57 +00:00

Inference Cooperative — operator documentation

Operator- and maintainer-facing documentation for the Inference Cooperative. This is the material that describes how the co-op's infrastructure is run — access tokens, scheduled tasks, maintenance procedures, outage write-ups, and the server-migration record — as opposed to the member-facing documentation published at https://docs.inference.coop/.

Anyone may read it; operators are the audience. Comment, or open an issue, where something looks wrong — that review is the point.

This repository is deliberately not a website

Unlike co-op/docs, nothing here is built or published by MkDocs. The repository is git-only: it is meant to be browsed, searched, and diffed in Gitea, or read from a clone. Every page carries operational detail (token rotation, deploy flows, failure modes) that belongs to operators rather than to members, so it is kept out of the public documentation site on purpose.

Read it on the web here: https://git.inference.coop/co-op/ops-docs

What is here

Path Contents
operator-token-runbook.md The Cloudron token model (agent vs portal, admin vs webhook), how to rotate each without breaking the stack
maintenance/chat-task-models.md The small pinned model used for chat titles/tags/suggestions
maintenance/librechat-sandbox.md Operating the LibreChat evaluation instance (config, overlay image, key sync, pitfalls)
incidents/ Post-incident write-ups, one file per incident
migration/ The Cloudron server-migration record: the plan, the DNS change sheet, and the captured pre-migration state
provider-pricing/ What our model providers charge, and when it changed

The migration material

migration/ holds the record of moving Cloudron to its new server: the plan (cloudron-server-migration.md), the record-by-record cutover sheet (dns-change-sheet.md), and the captured pre-migration state the restore checker compares against (migration-before-state.json).

The migration is complete (2026-11-02) — this material is kept as the record of how it was planned and done, not as pending work. Current operational procedure lives in the co-op's cloudron-ops skill; the member-facing description lives in co-op/docs/infrastructure.md.

Read the DNS sheet with this in mind

Its record counts cannot be trusted until reconciled against the registrar's panel. The zone is wildcarded, so any hostname resolves — a name that answers proves nothing about whether a record exists. At least two listed records turned out not to exist, and the real record inventory is only visible in the registrar's own list.

No secrets here

Audited 2026-11-01, including the full commit history: no credentials, tokens, keys, member emails or account identifiers. Where a runbook needs a credential to exist (a backup passphrase, an S3 key), it records where the credential is held, never the credential.

Where operators look

History

The operator runbook, maintenance pages and incident write-ups were moved here from co-op/docs, where they were previously published on the member-facing site. The migration material came from co-op/runbooks (now archived), and was brought across with its commit history intact via an unrelated-histories merge.

S
Description
Operator-facing documentation for the Inference Cooperative. Public and git-only: browsable in Gitea, deliberately not published as a website.
Readme
548 KiB
0 Stars 2 Watchers 0 Forks
Languages
Python 100%