forked from wrenn/wrenn
pptx704
a5ad3731f2
Moves 12 packages from internal/ to pkg/ (config, id, validate, events, db, auth, lifecycle, scheduler, channels, audit, service) so they can be imported by the enterprise repo as a Go module dependency. Introduces pkg/cpextension (shared Extension interface + ServerContext) and pkg/cpserver (Run() entrypoint with functional options) so the enterprise main.go can call cpserver.Run(cpserver.WithExtensions(...)) without duplicating the 20-step server bootstrap. Adds db/migrations/embed.go for go:embed access to OSS SQL migrations from the enterprise module. cmd/control-plane/main.go is reduced to a 10-line wrapper around cpserver.Run.
38 lines
1020 B
Plaintext
38 lines
1020 B
Plaintext
# Database
|
|
DATABASE_URL=postgres://wrenn:wrenn@localhost:5432/wrenn?sslmode=disable
|
|
|
|
# Redis
|
|
REDIS_URL=redis://localhost:6379/0
|
|
|
|
# Control Plane
|
|
WRENN_CP_LISTEN_ADDR=:9725
|
|
|
|
# Host Agent
|
|
WRENN_HOST_LISTEN_ADDR=:50051
|
|
WRENN_DIR=/var/lib/wrenn
|
|
WRENN_HOST_INTERFACE=eth0
|
|
WRENN_CP_URL=http://localhost:9725
|
|
WRENN_DEFAULT_ROOTFS_SIZE=5Gi
|
|
WRENN_FIRECRACKER_BIN=/usr/local/bin/firecracker
|
|
|
|
# Auth
|
|
JWT_SECRET=
|
|
|
|
# mTLS — CP→Agent channel
|
|
# Generate a self-signed CA with:
|
|
# openssl ecparam -genkey -name P-256 -noout -out ca.key
|
|
# openssl req -new -x509 -key ca.key -days 3650 -out ca.crt -subj "/CN=wrenn-internal-ca"
|
|
# Then set these to the file contents (newlines replaced with \n or use multiline env).
|
|
WRENN_CA_CERT=
|
|
WRENN_CA_KEY=
|
|
|
|
# Channels (notification destinations)
|
|
# AES-256-GCM key for encrypting channel secrets. Generate with: openssl rand -hex 32
|
|
WRENN_ENCRYPTION_KEY=
|
|
|
|
# OAuth
|
|
OAUTH_GITHUB_CLIENT_ID=
|
|
OAUTH_GITHUB_CLIENT_SECRET=
|
|
OAUTH_REDIRECT_URL=https://app.wrenn.dev
|
|
CP_PUBLIC_URL=https://app.wrenn.dev
|