vh/esh-pfi-infrastructure
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity

asset-engine: drop traefik wiring, LAN-direct only

Browse Source 
Internal tooling — accessed at http://10.250.50.70:8200, not through
Traefik. Removes the unused traefik labels (router rule, TLS, crowdsec
middleware, loadbalancer port) and the traefik-net network membership;
homepage.href now points at host:port for direct discovery, matching
task-board's pattern. Playbook verify drops the traefik-net membership
check.
This commit is contained in:
vh
2026-05-11 22:01:44 -07:00
parent 116ed15875
commit 44086248f6
4 changed files with 13 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stacks/asset-engine/.env.example
+2 -5
View File
@@ -7,13 +7,10 @@
ASSET_ENGINE_IMAGE=asset-engine:local
# Host port exposing the FastAPI app (container listens on 8000 internally).
# Internal-only tool — LAN access on this port is the primary entry; the
# Traefik labels in compose.yaml additionally route the public hostname.
# Internal tooling, LAN-only — this port is the only entry point. No Traefik.
ASSET_ENGINE_PORT=8200
# Bind address for the host port. 0.0.0.0 = LAN-reachable (default for an
# internal-only tool). Flip to 127.0.0.1 only if you want to force all
# traffic through traefik.
# Bind address for the host port. 0.0.0.0 = LAN-reachable.
ASSET_ENGINE_BIND=0.0.0.0
# Host paths for state. Container runs as uid 1000 — paths must be writable