mca/parking_solution
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 10 Wiki Activity

Merge branch 'dev' into stage
Build & push images / images (push) Successful in 2m46s
Details

Browse Source 
# Conflicts:
#	komodo/resources.toml
This commit is contained in:
Julian Çuni
2026-06-29 15:57:10 +02:00
parent 39c778fbac 8f32d90d28
commit d0b609e375
2 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker-compose.yml
+4
View File
@@ -24,6 +24,10 @@ services:
# Dedicated ledger-signing key. Falls back to JWT_SECRET (with a warning) if empty; # Dedicated ledger-signing key. Falls back to JWT_SECRET (with a warning) if empty;
# set a distinct one in prod. See apps/server/.env.example + local-jwt-auth. # set a distinct one in prod. See apps/server/.env.example + local-jwt-auth.
EVENT_SIGNING_KEY: ${EVENT_SIGNING_KEY:-} EVENT_SIGNING_KEY: ${EVENT_SIGNING_KEY:-}
# Dedicated backup-ENCRYPTION key (separate from the signing key). Empty = backups stay
# off (the in-UI target + retention do nothing without it). Per-booth + unique; escrow it
# offsite. See apps/server/.env.example + wiki/concepts/backup-recovery.md.
BACKUP_KEY: ${BACKUP_KEY:-}
# CRITICAL on the plain-HTTP booth LAN: cookies are Secure (HTTPS-only) by DEFAULT, # CRITICAL on the plain-HTTP booth LAN: cookies are Secure (HTTPS-only) by DEFAULT,
# so without COOKIE_SECURE=0 the auth cookie is never sent over http and operators # so without COOKIE_SECURE=0 the auth cookie is never sent over http and operators
# CANNOT LOG IN. Leave unset only behind TLS. See disk-os-hardening "deploy-time runbook". # CANNOT LOG IN. Leave unset only behind TLS. See disk-os-hardening "deploy-time runbook".
komodo/resources.toml
+4 -4
View File
@@ -46,10 +46,10 @@ registry_provider = "git.infra.msai.al"
registry_account = "komodo" registry_account = "komodo"
environment = """ environment = """
REGISTRY=git.infra.msai.al/mca/parking_solution REGISTRY=git.infra.msai.al/mca/parking_solution
# Staging booth: pin an immutable stage-<sha> per deploy. PLACEHOLDER below — after merging # Staging booth: pinned immutable stage-<sha>. After each promotion (merge dev → stage, CI builds
# dev → stage and CI builds :stage-<sha>, set this to that exact sha (or override TAG in Core at # :stage-<sha>), bump this to the new sha and re-sync/deploy from Core. The moving `:stage` tag
# deploy). The moving `:stage` tag exists as the pointer; we deploy the sha, not the mover. # exists as the pointer; we deploy the sha, not the mover.
TAG=stage-REPLACE_WITH_BUILT_SHA TAG=stage-39c778f
COOKIE_SECURE=0 COOKIE_SECURE=0
VISION_ENABLED=1 VISION_ENABLED=1
WS_ALLOWED_ORIGINS= WS_ALLOWED_ORIGINS=