ac/ac-deploy
1
0
Fork 0
mirror of git://f0xx.org/ac/ac-deploy synced 2026-07-29 03:58:34 +03:00
Code Issues Packages Projects Releases Wiki Activity

cluster0: lab seeds, Gitea mirrors, compose mail, verify tooling

Browse Source 
Freeze lab-seeds backend for COMPOSE_SKIP_MONOLITH; fix Gitea mirror scripts
for 1.25 API; add secrets.lab.env template, verify-mail-lab, LAB_PUBLIC_ORIGIN,
and credentials pointers for mirror token recovery.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Anton Afanasyeu
2026-06-23 17:07:46 +02:00
parent 98f30786b7
commit c554dc761d
209 changed files with 31249 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
sim/cluster0/secrets.lab.env.example Normal file
View File

@@ -0,0 +1,30 @@
# Lab cluster secrets — COPY to secrets.lab.env on NFS (/shared/cluster/secrets.lab.env)
# Mode 0600, owner root or deploy user. NOT committed to git.
#
# Recoverable via procedures in ac-docs/docs/SECRETS_AND_RECOVERY.md
# PHP auth (issues backend) — min 32 chars; changing invalidates sessions
AUTH_ENCRYPTION_KEY=lab-cluster-dev-32-char-min-secret!!
# Gitea mirror automation (optional; else regenerate on cast01)
# GITEA_MIRROR_ADMIN_TOKEN=
# WireGuard lab server (generate new for lab — do not copy prod)
# WG_SERVER_PRIVATE_KEY=
# WG_SERVER_PUBLIC_KEY=
# WG_ENDPOINT=cast01.intra.raptor.org:51820
# RSSH bastion (lab)
# RSSH_BASTION_HOST=cast01.intra.raptor.org
# RSSH_BASTION_PORT=22
# SMTP (when lab mail is configured — prefer email recovery)
# Fill on NFS /shared/cluster/secrets.lab.env (mode 600); re-run compose-lab-backend.sh
MAIL_TRANSPORT=smtp
MAIL_FROM=Android Cast Lab <noreply@acl0.f0xx.org>
MAIL_REPLY_TO=info@apps.f0xx.org
# SMTP_HOST=
# SMTP_PORT=587
# SMTP_ENCRYPTION=tls
# SMTP_USER=
# SMTP_PASS=