envrc.sample

# Secrets - Generate with: `./bin/rails secret`
# SECRET_KEY_BASE must be >= 128 characters -- Secret#crypt_key raises below that,
# and node agent_tokens are encrypted with it, so a short value silently nils
# every token. `./bin/rails secret` produces 128 hex chars.
export SECRET_KEY_BASE=
export USER_AUTH_SECRET=

# Shared enrollment secret the node presents as a Bearer to fetch its agent-token
# hash (GET /api/system/nodes/agent_token_hash -- no :id; the node is identified by
# its source IP, matched against the Node row's primary_ip or public_ip). Generate
# with `./bin/rails secret`.
export NODE_ENROLLMENT_TOKEN=

# DEV LB
export DEV_LB_HOSTNAME="a.cstacks.local"

# The Procfile serves plain HTTP on :3005. Production defaults to "https"; without
# this, update_balancer_service.rb curls a scheme the dev app never speaks and
# haproxy in dev can never receive a config.
export PORTAL_HTTP_SCHEME=http

# Linux should be `localhost`
# Using Colima on mac? `colima start --network-address && colima status -e` to get the IP.
# Note, you may also need to run the following commands if you don't see an address.
#
# `sudo /usr/libexec/ApplicationFirewall/socketfilterfw --add /usr/libexec/bootpd`
# `sudo /usr/libexec/ApplicationFirewall/socketfilterfw --unblock /usr/libexec/bootpd`
#
# See [this github issue](https://github.com/abiosoft/colima/issues/458#issuecomment-1989839779) for more details.
#
export DOCKER_IP=localhost

# Must be the IP of the node VM, reachable from this machine. `localhost` is only
# correct if you are running the node on this same box.
export DEV_VM_IP=

# Only needed if autodetection picks the wrong local interface/address when
# routing to DEV_VM_IP.
# export CONTROLLER_IP=

##
# You should not need to change anything else below this section.
##
# NOTE: always use ${BRACED} references below. This file is read by mise
# (.mise.toml's `_.file = '.envrc'`), whose dotenv parser ends a variable name
# at an underscore -- so $DOCKER_IP expands as $DOCKER followed by a literal
# "_IP", and DEV_DB_URL silently becomes an unparseable URL. Braces are correct
# for both mise and bash.

export LOCALE=en
export CURRENCY=USD
# Private key the controller uses to reach the node over SSH. An absolute path
# wins over the repo root, so keeping it in ~/.ssh means it survives a
# re-clone -- that is where lib/dev/workstation.sh puts it.
export CS_SSH_KEY=${HOME}/.ssh/computestacks_dev
export OBJC_DISABLE_INITIALIZE_FORK_SAFETY=YES
export INGRESS_TEST_URI=localhost/ingress
export BUNDLE_GEMFILE=Gemfile.common

# PowerDNS And ACME (used for testing).
export PDNS_DNS_PORT=55003
export PDNS_API_PORT=55004
export ACME_API_PORT=55005

# Local Resolver for testing
export RESOLVER_LIST="${DOCKER_IP}"
export RESOLVER_PORT="${PDNS_DNS_PORT}"

# Postgres
export DB_PORT=55001
export DEV_DB_URL=postgresql://controller:controller@${DOCKER_IP}:${DB_PORT}/computestacks
export TEST_DB_URL=postgresql://controller:controller@${DOCKER_IP}:${DB_PORT}/computestacks_test

# Redis
export REDIS_HOST="${DOCKER_IP}"
export REDIS_PORT=55002

# Guacamole
export GUAC_PORT=55010
export GUAC_KEY="" # pwgen -csy -r \`\"\' 15 1 | tr -d '\n' | md5sum | tr -d ' -'