root
f3679e6176
Introduce a self-contained kustomize stack under deploy/k3s covering namespace, config, placeholder secrets, infra StatefulSets, app Deployments/Services, migration and minio-init Jobs, and Traefik Ingress for both tenant and ops hosts. Add Dockerfile.ops-web so the operations frontend can ship as an nginx image, and extend the offline package script to build and bundle ops-api, kol-assist-worker, and ops-web alongside the k3s manifests. Wire the new ops/security knobs through .env.example and the compose stack. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
42 lines
913 B
YAML
42 lines
913 B
YAML
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: geo-rankly-app-secret
|
|
type: Opaque
|
|
stringData:
|
|
POSTGRES_PASSWORD: geo_dev
|
|
RABBITMQ_DEFAULT_PASS: geo_dev
|
|
MINIO_ROOT_USER: minioadmin
|
|
MINIO_ROOT_PASSWORD: minioadmin
|
|
JWT_SECRET: change-me-in-production
|
|
OPS_JWT_SECRET: change-me-in-production
|
|
OPS_DEFAULT_ADMIN_PASSWORD: change-me-before-apply
|
|
LLM_API_KEY: ""
|
|
SILICONFLOW_API_KEY: ""
|
|
SCHEDULER_INTERNAL_METRICS_TOKEN: change-me-scheduler-metrics-token
|
|
config.local.yaml: |
|
|
database:
|
|
password: geo_dev
|
|
|
|
monitoring_database:
|
|
password: geo_dev
|
|
|
|
rabbitmq:
|
|
url: amqp://geo:geo_dev@rabbitmq:5672/geo
|
|
|
|
object_storage:
|
|
access_key: minioadmin
|
|
secret_key: minioadmin
|
|
|
|
jwt:
|
|
secret: "change-me-in-production"
|
|
|
|
scheduler:
|
|
internal_metrics_token: "change-me-scheduler-metrics-token"
|
|
|
|
llm:
|
|
api_key: ""
|
|
|
|
retrieval:
|
|
api_key: ""
|