- Forgejo + Redis Docker stack (wetgit-forgejo role) - FastAPI + Celery systemd services (wetgit-app role) - Nginx vhosts voor git.wetgit.nl en api.wetgit.nl (wetgit-nginx role) - SSL via Let's Encrypt (certbot webroot) - Backup script (forgejo dump, geen downtime) - Codeberg mirror script - Cron jobs voor backup/mirror/log cleanup - Ansible vault voor secrets (encrypted) Geïsoleerd van dt-platform: eigen poorten, users, directories.
45 lines
1.2 KiB
YAML
45 lines
1.2 KiB
YAML
# WetGIT - Nederlandse wetgeving als code
|
|
# Deployment variables for dt-prod-01
|
|
#
|
|
# IMPORTANT: This server is shared with dt-platform.
|
|
# Do NOT use ports 8001 (dt-chatbot), 8200 (grimoire).
|
|
# Do NOT modify /opt/dt-chatbot, /opt/dt-skills-portal, /opt/grimoire.
|
|
# Do NOT modify the global nginx.conf — only add vhost configs.
|
|
|
|
# --- Application ---
|
|
app_name: wetgit
|
|
app_dir: /opt/wetgit
|
|
data_dir: /data/wetgit
|
|
|
|
# FastAPI backend
|
|
backend_port: 8002
|
|
backend_workers: 1
|
|
backend_host: "127.0.0.1"
|
|
|
|
# --- Domains ---
|
|
server_name: "api.wetgit.nl"
|
|
forgejo_domain: "git.wetgit.nl"
|
|
|
|
# --- Forgejo ---
|
|
forgejo_port: 3000
|
|
forgejo_data_dir: /opt/wetgit/data
|
|
forgejo_admin_user: coornhert
|
|
forgejo_admin_email: coornhert@wetgit.nl
|
|
|
|
# --- Redis (Docker, shared network with Forgejo) ---
|
|
redis_port: 6379
|
|
redis_host: "127.0.0.1"
|
|
|
|
# --- Celery ---
|
|
celery_concurrency: 2
|
|
|
|
# --- Codeberg mirror ---
|
|
codeberg_api_token: "{{ vault_codeberg_api_token | default('') }}"
|
|
|
|
# --- AgentMail ---
|
|
agentmail_api_key: "{{ vault_agentmail_api_key }}"
|
|
|
|
# --- Secrets (from vault.yml) ---
|
|
# vault_agentmail_api_key
|
|
# vault_codeberg_api_token (add when Codeberg account is ready)
|
|
# vault_forgejo_admin_password (initial admin password)
|