chore(deploy): pass FLEET_SECRET to the apess-api container

The API gates board self-registration on FLEET_SECRET; wire it through
docker-compose (host .env) alongside ADMIN_CODE/JUDGE_CODE and document
it in the deploy README.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
This commit is contained in:
Omar Sobh
2026-07-07 09:37:13 -07:00
co-authored by Claude Opus 4.8
parent 3f6c6ab399
commit 5f70c8257e
2 changed files with 5 additions and 1 deletions
+1
View File
@@ -28,6 +28,7 @@ Drops `apess-web` (static SPA) and `apess-api` (collective backend) next to the
```bash ```bash
ADMIN_CODE=<instructor code from the slide> ADMIN_CODE=<instructor code from the slide>
JUDGE_CODE=<judge panel code> JUDGE_CODE=<judge panel code>
FLEET_SECRET=<shared board-fleet secret; must match each board's apess-node.env>
``` ```
## Deploy ## Deploy
+4 -1
View File
@@ -23,9 +23,12 @@ services:
networks: networks:
- clawbooks-net - clawbooks-net
environment: environment:
# set ADMIN_CODE / JUDGE_CODE on the host (e.g. an .env file next to this) # set ADMIN_CODE / JUDGE_CODE / FLEET_SECRET on the host (e.g. an .env file next to this)
ADMIN_CODE: ${ADMIN_CODE:?set ADMIN_CODE} ADMIN_CODE: ${ADMIN_CODE:?set ADMIN_CODE}
JUDGE_CODE: ${JUDGE_CODE:?set JUDGE_CODE} JUDGE_CODE: ${JUDGE_CODE:?set JUDGE_CODE}
# Shared secret boards present to POST /nodes/self-register — must match
# the FLEET_SECRET baked into each board's apess-node.env.
FLEET_SECRET: ${FLEET_SECRET:?set FLEET_SECRET}
CORS_ORIGIN: https://apess.redclaw.dev CORS_ORIGIN: https://apess.redclaw.dev
DB_PATH: /data/apess.db DB_PATH: /data/apess.db
volumes: volumes: