feat(diariz): pilot stack on fv-ml1 GPU 3 — override (GPU pin, api port), vault-rendered .env, nightly idle-gated worker restart, fleet caddy site

stacks/diariz/render-env.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+# Render Diariz's .env from the vault to stdout (never echo it; pipe it straight to the host). Run on nh3-dev.
+set -euo pipefail
+v() { secret get "$1"; }
+cat <<ENV
+COMPOSE_PROFILES=live-worker
+POSTGRES_PASSWORD=$(v diariz/postgres-password)
+REDIS_PASSWORD=$(v diariz/redis-password)
+JWT_KEY=$(v diariz/jwt-key)
+CALLBACK_SECRET=$(v diariz/callback-secret)
+S3_ROOT_ACCESS_KEY=$(v diariz/s3-root-access-key)
+S3_ROOT_SECRET_KEY=$(v diariz/s3-root-secret-key)
+S3_APP_ACCESS_KEY=$(v diariz/s3-app-access-key)
+S3_APP_SECRET_KEY=$(v diariz/s3-app-secret-key)
+SEED_EMAIL=lkraven@lkraven.com
+SEED_PASSWORD=$(v diariz/seed-password)
+SEED_FULL_NAME=Vuong Hoang
+HF_TOKEN=$(v fv-ml1/hf-token)
+APP_PUBLIC_URL=https://diariz.nh3.phasefinal.com
+MCP_OAUTH_ENABLED=false
+API_BIND=127.0.0.1
+WEB_BIND=0.0.0.0
+SUMMARY_API_BASE=http://10.250.50.70:4000/v1
+SUMMARY_API_KEY=$(v diariz/litellm-key)
+SUMMARY_MODEL=gen
+CHAT_CONTEXT_LENGTH=245760
+DICTATION_API_BASE=http://10.250.50.70:4000/v1
+DICTATION_API_KEY=$(v diariz/litellm-key)
+DICTATION_MODEL=whisper-1
+ENV