Gabriel Brown
f33da41cc6
A machine's role is now the interview's first question and the one answer Panama records. Servers get the same shell minus the screen: core packages, nvm, Bun, Claude Code and Codex (desktops get Codex too), linger, rootless ports from 80, firewalld, the nginx-bridge network, and a nightly image updater that replaced watchtower for cause. server/containers/ carries junior's 23 compose services -- secrets moved to per-machine .env files that never enter this public repo, every transformed compose proven to render byte-identical to what is live. 'panama server' enables, disables and relinks them; nothing here restarts a running service. 'boot --server' walks a fresh VPS from its root login to a normal install. Five new contracts pin the secrets rule, the catalog's shape, panama-server's behavior, the role plumbing, and the dotfile classification. Claude-Session: https://claude.ai/code/session_01NU5JGiN3JfzqrLQB6wmJ1E
67 lines
2.4 KiB
Bash
67 lines
2.4 KiB
Bash
AUTH_AUTHENTIK_ID=CHANGE_ME
|
|
AUTH_AUTHENTIK_ISSUER="https://auth.gbrown.org/application/o/spoon/"
|
|
AUTH_AUTHENTIK_SECRET=CHANGE_ME
|
|
AUTH_GITHUB_ID="Iv23liygrKjd17rba96x"
|
|
AUTH_GITHUB_SECRET=CHANGE_ME
|
|
BACKEND_CONTAINER_NAME="spoon-backend"
|
|
BACKEND_DOMAIN="convex.spoon.gbrown.org"
|
|
BACKEND_PORT="3210"
|
|
BACKEND_TAG="latest"
|
|
CONVEX_CLOUD_ORIGIN="https://api.spoon.gbrown.org"
|
|
CONVEX_SELF_HOSTED_ADMIN_KEY=CHANGE_ME
|
|
CONVEX_SELF_HOSTED_URL="https://api.spoon.gbrown.org"
|
|
CONVEX_SITE_ORIGIN="https://convex.spoon.gbrown.org"
|
|
CONVEX_SITE_URL="https://spoon.gbrown.org"
|
|
DASHBOARD_CONTAINER_NAME="spoon-dashboard"
|
|
DASHBOARD_DOMAIN="dashboard.spoon.gbrown.org"
|
|
DASHBOARD_PORT="6791"
|
|
DASHBOARD_TAG="latest"
|
|
DISABLE_BEACON="true"
|
|
DO_NOT_REQUIRE_SSL="true"
|
|
GITHUB_APP_CLIENT_ID="Iv23liygrKjd17rba96x"
|
|
GITHUB_APP_CLIENT_SECRET=CHANGE_ME
|
|
GITHUB_APP_ID="4111484"
|
|
GITHUB_APP_INSTALLATION_ID="141786602"
|
|
GITHUB_APP_OWNER="gibbyb"
|
|
GITHUB_APP_PRIVATE_KEY=CHANGE_ME
|
|
GITHUB_APP_SLUG="spoon-gbrown"
|
|
GITHUB_APP_WEBHOOK_SECRET=CHANGE_ME
|
|
INSTANCE_NAME="convex"
|
|
NETWORK="nginx-bridge"
|
|
NEXT_CONTAINER_NAME="spoon-next"
|
|
NEXT_DOMAIN="spoon.gbrown.org"
|
|
NEXT_PORT="3000"
|
|
NEXT_PUBLIC_CONVEX_URL="https://api.spoon.gbrown.org"
|
|
NEXT_PUBLIC_DEPLOYMENT_URL="https://api.spoon.gbrown.org"
|
|
NEXT_PUBLIC_PLAUSIBLE_URL="https://plausible.gbrown.org"
|
|
NEXT_PUBLIC_SENTRY_DSN="https://[email protected]/8"
|
|
NEXT_PUBLIC_SENTRY_ORG="sentry"
|
|
NEXT_PUBLIC_SENTRY_PROJECT_NAME="spoon-nextjs"
|
|
NEXT_PUBLIC_SENTRY_URL="https://sentry.gbrown.org"
|
|
NEXT_PUBLIC_SITE_URL="https://spoon.gbrown.org"
|
|
NODE_ENV="production"
|
|
POSTGRES_CONTAINER_NAME="spoon-postgres"
|
|
POSTGRES_DB="spoon_convex"
|
|
POSTGRES_PASSWORD=CHANGE_ME
|
|
POSTGRES_PORT="5432"
|
|
POSTGRES_URL=CHANGE_ME
|
|
POSTGRES_USER="spoon"
|
|
REDACT_LOGS_TO_CLIENT="true"
|
|
SENTRY_AUTH_TOKEN=CHANGE_ME
|
|
SITE_PROXY_PORT="3211"
|
|
SPOON_ENCRYPTION_KEY=CHANGE_ME
|
|
SPOON_WORKER_TOKEN=CHANGE_ME
|
|
USESEND_API_KEY=CHANGE_ME
|
|
USESEND_FROM_EMAIL="Spoon Admin <[email protected]>"
|
|
USESEND_URL="https://usesend.gbrown.org"
|
|
SPOON_AGENT_JOB_IMAGE=git.gbrown.org/gib/spoon-agent-job:latest
|
|
SPOON_AGENT_JOB_TIMEOUT_MS="1800000"
|
|
SPOON_AGENT_MAX_CONCURRENT_JOBS="1"
|
|
SPOON_AGENT_NETWORK=nginx-bridge
|
|
SPOON_AGENT_RUNTIME=docker
|
|
SPOON_AGENT_WORKDIR=/var/lib/spoon-agent/work
|
|
SPOON_AGENT_WORKER_ID=production-worker
|
|
SPOON_AGENT_WORKER_HTTP_PORT="3921"
|
|
SPOON_AGENT_WORKER_INTERNAL_TOKEN=CHANGE_ME
|
|
SPOON_AGENT_WORKER_URL=http://spoon-agent-worker:3921
|