chore(deploy): pass FLEET_SECRET to the apess-api container
The API gates board self-registration on FLEET_SECRET; wire it through docker-compose (host .env) alongside ADMIN_CODE/JUDGE_CODE and document it in the deploy README. Co-Authored-By: Claude Opus 4.8 <[email protected]>
This commit is contained in:
co-authored by
Claude Opus 4.8
parent
3f6c6ab399
commit
5f70c8257e
@@ -28,6 +28,7 @@ Drops `apess-web` (static SPA) and `apess-api` (collective backend) next to the
|
|||||||
```bash
|
```bash
|
||||||
ADMIN_CODE=<instructor code from the slide>
|
ADMIN_CODE=<instructor code from the slide>
|
||||||
JUDGE_CODE=<judge panel code>
|
JUDGE_CODE=<judge panel code>
|
||||||
|
FLEET_SECRET=<shared board-fleet secret; must match each board's apess-node.env>
|
||||||
```
|
```
|
||||||
|
|
||||||
## Deploy
|
## Deploy
|
||||||
|
|||||||
@@ -23,9 +23,12 @@ services:
|
|||||||
networks:
|
networks:
|
||||||
- clawbooks-net
|
- clawbooks-net
|
||||||
environment:
|
environment:
|
||||||
# set ADMIN_CODE / JUDGE_CODE on the host (e.g. an .env file next to this)
|
# set ADMIN_CODE / JUDGE_CODE / FLEET_SECRET on the host (e.g. an .env file next to this)
|
||||||
ADMIN_CODE: ${ADMIN_CODE:?set ADMIN_CODE}
|
ADMIN_CODE: ${ADMIN_CODE:?set ADMIN_CODE}
|
||||||
JUDGE_CODE: ${JUDGE_CODE:?set JUDGE_CODE}
|
JUDGE_CODE: ${JUDGE_CODE:?set JUDGE_CODE}
|
||||||
|
# Shared secret boards present to POST /nodes/self-register — must match
|
||||||
|
# the FLEET_SECRET baked into each board's apess-node.env.
|
||||||
|
FLEET_SECRET: ${FLEET_SECRET:?set FLEET_SECRET}
|
||||||
CORS_ORIGIN: https://apess.redclaw.dev
|
CORS_ORIGIN: https://apess.redclaw.dev
|
||||||
DB_PATH: /data/apess.db
|
DB_PATH: /data/apess.db
|
||||||
volumes:
|
volumes:
|
||||||
|
|||||||
Reference in New Issue
Block a user