16f3b43974
Some checks failed
CI / skinny-install (aco) (push) Successful in 1m12s
CI / skinny-install (api) (push) Successful in 30s
CI / skinny-install (bcda) (push) Successful in 36s
CI / skinny-install (bib) (push) Successful in 35s
CI / skinny-install (bls) (push) Successful in 27s
CI / skinny-install (ccw) (push) Successful in 32s
CI / skinny-install (cli) (push) Successful in 41s
CI / skinny-install (cms) (push) Successful in 37s
CI / skinny-install (conf) (push) Successful in 38s
CI / skinny-install (opps) (push) Successful in 33s
CI / skinny-install (perf) (push) Successful in 38s
CI / skinny-install (pfs) (push) Successful in 38s
CI / skinny-install (rex) (push) Successful in 34s
Deploy / build-scan-report (push) Failing after 46s
Infra CI / notebooks (push) Failing after 25s
Infra CI / zotero (push) Successful in 12s
Infra CI / docs (push) Failing after 16s
CI / lint-test (push) Failing after 11m2s
Infra CI / mc (push) Successful in 21s
Infra CI / api (push) Successful in 29s
Package Supply Chain / pkg-supply-chain (push) Failing after 41s
Mail: Maddy on DO (corwins.media+Resend, fhirworx.io+Postmark), touchless/stateless/idempotent. Gitea SMTP via env_file. CMS inbox at cmsupdates@mail.fhirworx.io with IMAP→bib poller. Bib: regulations.gov v4 client, Federal Register discovery, 164K comment backfill (running), IMAP email ingest, Zotero sync routing. PRISMA: altcha PoW solver, CrossRef DOI resolution, 83/129 PDFs. Zotero: schema parity, ops module, CLI, fail-fast guard. CI: docs.Dockerfile COPY glob fix (tracks #341). Infra: Gitea+marimo fhirworx themes, IOM/OIG modules.
68 lines
2.5 KiB
Plaintext
68 lines
2.5 KiB
Plaintext
# ── Secrets (required) ──────────────────────────────
|
|
POSTGRES_PASSWORD=changeme
|
|
RUSTFS_ROOT_USER=admin
|
|
RUSTFS_ROOT_PASSWORD=changeme
|
|
RUSTFS_ACCESS_KEY=changeme
|
|
RUSTFS_SECRET_KEY=changeme
|
|
GITEA_S3_ACCESS_KEY=changeme
|
|
GITEA_S3_SECRET_KEY=changeme
|
|
GITEA_DB_PASSWORD=changeme
|
|
GITEA_TOKEN=changeme
|
|
WOODPECKER_DB_PASSWORD=changeme
|
|
WOODPECKER_AGENT_SECRET=changeme
|
|
WOODPECKER_GITEA_CLIENT=changeme
|
|
WOODPECKER_GITEA_SECRET=changeme
|
|
|
|
# Nessie Data Lake
|
|
NESSIE_DB_PASSWORD=changeme
|
|
NESSIE_S3_ACCESS_KEY=changeme
|
|
NESSIE_S3_SECRET_KEY=changeme
|
|
|
|
# Polaris Iceberg Catalog
|
|
POLARIS_DB_PASSWORD=changeme
|
|
POLARIS_ROOT_SECRET=changeme
|
|
POLARIS_S3_ACCESS_KEY=changeme
|
|
POLARIS_S3_SECRET_KEY=changeme
|
|
|
|
# Zotero WebDAV (rclone → S3)
|
|
WEBDAV_S3_ACCESS_KEY=changeme
|
|
WEBDAV_S3_SECRET_KEY=changeme
|
|
WEBDAV_USER=zotero
|
|
WEBDAV_PASS=changeme
|
|
|
|
# Databricks (optional)
|
|
DATABRICKS_HOST=
|
|
DATABRICKS_TOKEN=
|
|
|
|
# ── Deployment ──────────────────────────────────────
|
|
# Base domain — all services get {name}.DOMAIN FQDNs.
|
|
# DNS must resolve *.DOMAIN to HOST_IP.
|
|
DOMAIN=fhirworx.io
|
|
HOST_IP=192.168.1.192
|
|
DOCKER_SOCK=/run/user/1000/docker.sock
|
|
|
|
# ── S3 / Object Storage ────────────────────────────
|
|
S3_ENDPOINT=http://rustfs:9000
|
|
S3_REGION=us-east-1
|
|
S3_WAREHOUSE=s3://lakehouse/
|
|
|
|
# ── Grafana ─────────────────────────────────────────
|
|
GF_ADMIN_PASSWORD=admin
|
|
|
|
# ── Woodpecker ──────────────────────────────────────
|
|
WOODPECKER_ADMIN=kert
|
|
|
|
# ── PRISMA / LLM ───────────────────────────────────
|
|
# Model-agnostic by design. Flip PRISMA_LLM_PROVIDER to "openai-compat"
|
|
# (with PRISMA_LLM_BASE_URL pointing at a vLLM/Ollama endpoint) to
|
|
# swap away from Anthropic — no code changes.
|
|
PRISMA_LLM_PROVIDER=anthropic
|
|
PRISMA_LLM_MODEL=claude-opus-4-6
|
|
PRISMA_LLM_BASE_URL=
|
|
ANTHROPIC_API_KEY=
|
|
OPENAI_API_KEY=
|
|
DIGITAL_OCEAN_PAT= # for `stack prisma vpn up` — droplet for fallback fetches
|
|
PRISMA_VPN_REGION=nyc3 # DO region slug (reachable from your ISP)
|
|
PRISMA_FETCH_PROXY= # populated by `stack prisma vpn up`; e.g. socks5://127.0.0.1:1080
|
|
UNPAYWALL_EMAIL=dev@fhirworx.io # required by Unpaywall API ToS
|