Gabriel Brown
f33da41cc6
A machine's role is now the interview's first question and the one answer Panama records. Servers get the same shell minus the screen: core packages, nvm, Bun, Claude Code and Codex (desktops get Codex too), linger, rootless ports from 80, firewalld, the nginx-bridge network, and a nightly image updater that replaced watchtower for cause. server/containers/ carries junior's 23 compose services -- secrets moved to per-machine .env files that never enter this public repo, every transformed compose proven to render byte-identical to what is live. 'panama server' enables, disables and relinks them; nothing here restarts a running service. 'boot --server' walks a fresh VPS from its root login to a normal install. Five new contracts pin the secrets rule, the catalog's shape, panama-server's behavior, the role plumbing, and the dotfile classification. Claude-Session: https://claude.ai/code/session_01NU5JGiN3JfzqrLQB6wmJ1E
21 lines
624 B
Bash
21 lines
624 B
Bash
PG_PASS=CHANGE_ME
|
|
AUTHENTIK_SECRET_KEY=CHANGE_ME
|
|
AUTHENTIK_ERROR_REPORTING__ENABLED=true
|
|
COMPOSE_PORT_HTTP=9000
|
|
COMPOSE_PORT_HTTPS=9443
|
|
AUTHENTIK_TAG=2026.2.2
|
|
|
|
# SMTP Host Emails are sent to
|
|
AUTHENTIK_EMAIL__HOST=smtp.mail.me.com
|
|
AUTHENTIK_EMAIL__PORT=587
|
|
# Optionally authenticate (don't add quotation marks to your password)
|
|
AUTHENTIK_EMAIL__USERNAME=CHANGE_ME
|
|
AUTHENTIK_EMAIL__PASSWORD=CHANGE_ME
|
|
# Use StartTLS
|
|
AUTHENTIK_EMAIL__USE_TLS=true
|
|
# Use SSL
|
|
AUTHENTIK_EMAIL__USE_SSL=false
|
|
AUTHENTIK_EMAIL__TIMEOUT=10
|
|
# Email address authentik will send from, should have a correct @domain
|
|
AUTHENTIK_EMAIL__FROM=[email protected]
|