Dasemu
223b1ab8eb
All checks were successful
CI / test (push) Successful in 32s
The manager image had git but not openssh-client, so ssh:// clones
failed outright ("cannot run ssh"). Install openssh-client, and mount
an SSH_DIR (key + known_hosts) into the container read-only so private
repos can actually authenticate — confirmed both gaps while deploying
against real private Zenvairo repos.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
36 lines
1.4 KiB
Plaintext
36 lines
1.4 KiB
Plaintext
# Port the manager's own HTTP server listens on (the operator's own nginx proxies to this)
|
|
PORT=3000
|
|
|
|
# Path to the Docker/Podman-API-compatible socket.
|
|
# Production (Docker): /var/run/docker.sock
|
|
# Local dev (rootless Podman): /run/user/<uid>/podman/podman.sock
|
|
DOCKER_SOCKET_PATH=/var/run/docker.sock
|
|
|
|
# Name of the shared container network joining the manager and every installed MCP container
|
|
MCP_NETWORK_NAME=mcp-net
|
|
|
|
# Where the manager stores its SQLite DB, cloned repos and build logs
|
|
DATA_DIR=./data
|
|
|
|
# Public base URL used to build the authenticated MCP links shown in the UI, e.g. https://mcp.example.com
|
|
PUBLIC_BASE_URL=http://localhost:3000
|
|
|
|
# Password for the single admin/operator account that can use the panel
|
|
ADMIN_PASSWORD=change-me
|
|
|
|
# Random secret used to sign the admin session cookie
|
|
SESSION_SECRET=change-me-too
|
|
|
|
# Random string (min 32 chars) used to derive the AES-256-GCM key that encrypts
|
|
# installation env vars and bearer tokens at rest
|
|
MASTER_KEY=change-me-to-a-random-string-of-at-least-32-characters
|
|
|
|
# Resource caps applied to every installed MCP container (same limit for all, no per-installation override in V1)
|
|
CONTAINER_MEMORY_MB=512
|
|
CONTAINER_CPUS=1
|
|
|
|
# Absolute path to an SSH dir (key + known_hosts) with clone access to the repos you'll
|
|
# install, mounted read-only into the manager container so `git clone ssh://...` works for
|
|
# private repos. Required only if you install from private/SSH repo URLs.
|
|
SSH_DIR=/root/.ssh
|