New @lab/labd workspace package: - Fastify HTTP server + WebSocket for agent connections - Prisma schema (CockroachDB): Server, Agent, User, Role, Permission, UserRole, JoinToken, AuditLog, PulumiRun, Cluster models - Health endpoint with DB connectivity check - Server listing with cloud/env/status filters - Auth routes: agent enrollment, join token management - Placeholder mTLS auth middleware - Dev stack: CockroachDB single-node in docker-compose - 32 tests passing (2 new for labd health) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
37 lines
872 B
Plaintext
37 lines
872 B
Plaintext
# Lab PXE Bastion -- Environment Configuration
|
|
#
|
|
# Copy this file to .env and adjust as needed.
|
|
|
|
# Fedora version to install
|
|
FEDORA_VERSION=43
|
|
|
|
# Target architecture
|
|
ARCH=x86_64
|
|
|
|
# HTTP server port
|
|
HTTP_PORT=8080
|
|
|
|
# System locale and timezone for installed machines
|
|
TIMEZONE=Europe/London
|
|
LOCALE=en_GB.UTF-8
|
|
|
|
# Data directory (inside container)
|
|
BASTION_DIR=/data
|
|
|
|
# Internal domain for hostnames (e.g., node1.ad.itaz.eu)
|
|
DOMAIN=ad.itaz.eu
|
|
|
|
# DHCP mode: "proxy" works alongside existing DHCP (e.g., UniFi)
|
|
# "full" means bastion is the only DHCP server
|
|
DHCP_MODE=proxy
|
|
|
|
# Only used in full DHCP mode -- auto-derived from network if empty
|
|
DHCP_RANGE_START=
|
|
DHCP_RANGE_END=
|
|
|
|
# Path to SSH keys directory on host (mounted read-only)
|
|
SSH_KEY_PATH=~/.ssh
|
|
|
|
# CockroachDB connection (used by labd)
|
|
DATABASE_URL=postgresql://root@localhost:26257/labctl?sslmode=disable
|