4a50009445
Single registry drives Traefik routing, Prometheus scraping, and
the dashboard. FQDN pattern: {service}.{DOMAIN}. Adding a service
= one line in the reef dict + a compose block.
- Parameterize .env (DOMAIN, HOST_IP, S3_*, etc.) and compose.yml
- Zero-trust: remove host port exposure from postgres, rustfs, jaeger
- Traefik Go template replaces 193-line hand-written routing config
- Fold middlewares.yml into the template, delete separate file
- Prometheus switches to file_sd_configs with targets registry
- Dashboard uses JS domain resolution (zero hardcoded FQDNs)
- Grafana provisioning: datasources for Prometheus, Loki, Jaeger
- Vendor rewrite-body plugin (remove nested .git, track as files)
- Trino catalog uses ${ENV:...} for S3 settings
- CI: split traefik validation (yamllint static + template render)
- Add .env.example documenting all deployment knobs
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
12 lines
404 B
INI
12 lines
404 B
INI
connector.name=iceberg
|
|
iceberg.catalog.type=nessie
|
|
iceberg.nessie-catalog.uri=http://nessie:19120/api/v2
|
|
iceberg.nessie-catalog.ref=main
|
|
iceberg.nessie-catalog.default-warehouse-dir=${ENV:S3_WAREHOUSE}
|
|
fs.native-s3.enabled=true
|
|
s3.endpoint=${ENV:S3_ENDPOINT}
|
|
s3.path-style-access=true
|
|
s3.region=${ENV:S3_REGION}
|
|
s3.aws-access-key=${ENV:NESSIE_S3_ACCESS_KEY}
|
|
s3.aws-secret-key=${ENV:NESSIE_S3_SECRET_KEY}
|