ced4568
507ac4c5d3
common/firewall/docker-tls/platform/lab-host/monitoring-agent/backup roles, orchestrated by site.yml with the ordering that matters (firewall/TLS land before the services that depend on them). Ansible Vault for secrets, no new tool introduced for this project's modest secret surface. Explicit dev/staging/production environment separation, no secrets committed (.gitignore covers vault plaintext, TLS keys, Terraform state, *.env). Validated: ansible-playbook --syntax-check clean.
9 lines
432 B
Bash
9 lines
432 B
Bash
# Production environment template for rn-platform-01's `gateway` service.
|
|
# `api`/`provisioner` are Docker Compose service names, not localhost — production runs these
|
|
# on a named bridge network (rn-platform-internal), not network_mode: host like dev.
|
|
|
|
PLATFORM_API_URL=http://api:4300
|
|
PROVISIONER_URL=http://provisioner:4100
|
|
PROVISIONER_SHARED_SECRET=__REPLACE_same_value_as_platform.env_and_provisioner.env__
|
|
GATEWAY_PORT=4200
|