vh/esh-pfi-infrastructure
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(albok-service): 0.1.2 on nh3-docker (fd leak); add restricted wing personal/agent-feedback; Nemi credentials

Browse Source
This commit is contained in:
vh
2026-10-03 02:54:18 -07:00
parent 1fb36b32d2
commit 8a4dbf2341
6 changed files with 30 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stacks/albok-service/compose.yaml
+3 -1
View File
@@ -9,9 +9,10 @@
# ⚠ Exactly ONE instance per private root: a second one exits 75 on the lease. Never scale this.
# ⚠ Nothing else may mount /srv/albok/store read-write. Viewers mount it :ro with group_add by gid
# (1510 albok-read, 1511 albok-personal) and need GIT_OPTIONAL_LOCKS=0 + a safe.directory entry.
# 1512 albok-feedback (restricted wing personal/agent-feedback) is default-deny: no viewer gets it.
services:
albok-service:
image: gitea.phasefinal.com/pfi/albok-service:0.1.1@sha256:33e4e98a27412c386af60722a09e85ffe9370d63598d2aed39dd39676862d774
image: gitea.phasefinal.com/pfi/albok-service:0.1.2@sha256:6f91a33f3e96ec7d6b043f83db2f4661e6d34034aff2c8d116b0fcec39d268be
container_name: albok-service
restart: unless-stopped
ports:
@@ -20,6 +21,7 @@ services:
group_add:
- "1510"
- "1511"
- "1512" # albok-feedback: restricted wing personal/agent-feedback
volumes:
- /srv/albok/store:/srv/albok/store
- /srv/albok/private:/srv/albok/private