westfarn
ec294a1d45
Sync runner checkout / sync (push) Successful in 6s
## Summary - Closes [#20](#20). - Register **starbuck** (`10.0.0.44`) and **apollo** (`10.0.0.7`) as Proxmox app hosts in `webservers`, with `host_apps` copied from **roslin** (same apps/ports; **no** `monica_site` worker — that stays a singleton on **adama**). - Allow `starbuck` / `apollo` in `provision.sh` and `deploy.sh`; document inventory, NPM backends, and Alloy `host` labels. ## Test plan - [ ] `ansible-inventory --list` shows both hosts under `webservers` at the expected IPs. - [ ] Bootstrap SSH + passwordless sudo on each VM (keep a Proxmox console open for first UFW enable). - [ ] `ansible starbuck,apollo -m ping` - [ ] `./scripts/provision.sh starbuck --check` then `./scripts/provision.sh starbuck` - [ ] `./scripts/provision.sh apollo --check` then `./scripts/provision.sh apollo` - [ ] `./scripts/deploy.sh starbuck` and `./scripts/deploy.sh apollo` bring up the same app+env set as roslin. - [ ] `monica_site` dj-queue worker still runs **only** on adama. - [ ] Grafana/Loki show `host="starbuck"` and `host="apollo"`. - [ ] NPM Advanced upstreams (manual): add `starbuck:PORT` and `apollo:PORT` beside adama/roslin.Reviewed-on: #21
39 lines
1.7 KiB
YAML
39 lines
1.7 KiB
YAML
---
|
|
# ai-server-4080 — control node + Gitea act runner. Update IP with:
|
|
# ip -4 addr show scope global
|
|
ansible_host: 10.0.0.128
|
|
|
|
ansible_control_node: true
|
|
# Deploy/ansible runs on this host; avoid self-SSH (breaks after long tasks / CI keys).
|
|
ansible_connection: local
|
|
act_runner_enabled: true
|
|
|
|
# Central Loki + Prometheus + Grafana (roles/observability).
|
|
observability_stack: true
|
|
|
|
# SearxNG JSON search API for chat_backend grounded retrieval (#10).
|
|
# Host port 8088 — 8080 is dta_webapp on this host. chat_backend secret:
|
|
# SEARXNG_BASE_URL=http://10.0.0.128:8088
|
|
searxng_stack: true
|
|
|
|
# This host's pre-existing ~/.ssh/id_ed25519 is a personal key WITH a passphrase,
|
|
# which hangs the (non-BatchMode) gitea access probe. Use a dedicated,
|
|
# passphrase-less deploy key here instead.
|
|
gitea_key_path: "/home/{{ admin_user }}/.ssh/gitea_deploy"
|
|
|
|
# company_site + dta_webapp + dta_service for side testing and active/active.
|
|
# Ports MUST match adama/roslin/starbuck/apollo so NPM can balance all upstreams.
|
|
host_apps:
|
|
- { name: company_site, env: prod, port: 8000 }
|
|
- { name: dta_webapp, env: prod, port: 8080 }
|
|
- { name: dta_webapp, env: beta, port: 8081 }
|
|
- { name: dta_service, env: prod, port: 8001 }
|
|
- { name: dta_service, env: beta, port: 8011 }
|
|
- { name: scha, env: prod, port: 8002 }
|
|
- { name: chat_web_app, env: prod, port: 8082 }
|
|
- { name: chat_web_app, env: beta, port: 8083 }
|
|
- { name: chat_backend, env: prod, port: 8003 }
|
|
- { name: chat_backend, env: beta, port: 8013 }
|
|
# monica_site worker NOT here — adama host_apps sets compose_profiles: [worker].
|
|
- { name: monica_site, env: prod, port: 8004 }
|
|
- { name: monica_site, env: beta, port: 8014 } |