vh
db97899037
Operator decision 2026-06-13 (relayed by comfy-dev, confirmed in-session): turn off the prod arbo engine's bearer auth and rely on the WireGuard perimeter. Reverses ADR-0001's open-auth-hole-closed posture (comfy-dev owns the ADR update on the vh/arbo side). The app's protected-gate no-ops only when ENGINE_TOKEN is ABSENT — an empty string still gates (verified: ENGINE_TOKEN="" -> /workflows 401). So both inject paths are removed: the compose environment line is commented out and the .env line deleted on the host. Result: tokenless GET /workflows 200 (was 401), matching the dev engine. Original token preserved in the host's .env.pre-auth-off.bak for re-enable. playbooks/arbo-disable-engine-token.yaml captures the reversible procedure.
32 lines
1.5 KiB
Bash
32 lines
1.5 KiB
Bash
# Arbo engine — real .env lives on irv-ml1 (gitignored), this is the template.
|
|
# Copy to .env on the host and fill the secrets. See README.md for provisioning.
|
|
|
|
# Image comfy-dev builds + pushes (pin a tag; bump on code/schema change only):
|
|
ARBO_IMAGE=gitea.phasefinal.com/vh/arbo:0.11.0
|
|
|
|
# Published port on irv-ml1 (reachable over WireGuard at 10.100.79.3:<port>):
|
|
ARBO_PORT=8200
|
|
ARBO_BIND=0.0.0.0
|
|
|
|
# Run-as ownership — must match /worktank owner so basedir writes land clean:
|
|
ARBO_UID=1000
|
|
ARBO_GID=1000
|
|
|
|
# Host path of the comfy-dev catalog checkout (the git pull target, mounted ro):
|
|
ARBO_CATALOG_DIR=/worktank/arbo/repo
|
|
|
|
# ── Secrets (DO NOT COMMIT REAL VALUES) ──────────────────────────────
|
|
# ENGINE_TOKEN: bearer auth is intentionally OFF (operator decision 2026-06-13,
|
|
# WireGuard = the boundary). Leave it UNSET — the protected-gate no-ops only
|
|
# when the var is ABSENT (an empty `ENGINE_TOKEN=` still gates), and the compose
|
|
# injection is commented out to match. To re-lock: un-comment the compose line
|
|
# `- ENGINE_TOKEN=${ENGINE_TOKEN}`, mint a bearer (`openssl rand -hex 32`), set
|
|
# it below, `compose up -d`.
|
|
# ENGINE_TOKEN=
|
|
|
|
# GRANITE_KEY: the LiteLLM virtual key scoped to arbo. The 'arbo-prompt-enhance'
|
|
# vkey (comfy-dev, issued 2026-06-09) is extended to reach BOTH granite-4.1-8b
|
|
# (gen step) AND qwen3.5-9b-fp8 (vision / hero judge step, v0.11.3+).
|
|
# Reuse or rotate it; do NOT use the master sk-corvid key.
|
|
GRANITE_KEY=
|