Files
lab/bastion/stack/.env.example
Michal 44f1ebb843 feat: scaffold labd — master daemon with CockroachDB + Prisma
New @lab/labd workspace package:
- Fastify HTTP server + WebSocket for agent connections
- Prisma schema (CockroachDB): Server, Agent, User, Role, Permission,
  UserRole, JoinToken, AuditLog, PulumiRun, Cluster models
- Health endpoint with DB connectivity check
- Server listing with cloud/env/status filters
- Auth routes: agent enrollment, join token management
- Placeholder mTLS auth middleware
- Dev stack: CockroachDB single-node in docker-compose
- 32 tests passing (2 new for labd health)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-18 00:13:16 +00:00

37 lines
872 B
Plaintext

# Lab PXE Bastion -- Environment Configuration
#
# Copy this file to .env and adjust as needed.
# Fedora version to install
FEDORA_VERSION=43
# Target architecture
ARCH=x86_64
# HTTP server port
HTTP_PORT=8080
# System locale and timezone for installed machines
TIMEZONE=Europe/London
LOCALE=en_GB.UTF-8
# Data directory (inside container)
BASTION_DIR=/data
# Internal domain for hostnames (e.g., node1.ad.itaz.eu)
DOMAIN=ad.itaz.eu
# DHCP mode: "proxy" works alongside existing DHCP (e.g., UniFi)
# "full" means bastion is the only DHCP server
DHCP_MODE=proxy
# Only used in full DHCP mode -- auto-derived from network if empty
DHCP_RANGE_START=
DHCP_RANGE_END=
# Path to SSH keys directory on host (mounted read-only)
SSH_KEY_PATH=~/.ssh
# CockroachDB connection (used by labd)
DATABASE_URL=postgresql://root@localhost:26257/labctl?sslmode=disable