On AnD0R the reverse-proxy lives on the 'backend' docker network; on cloud.neuronetz.ai it's 'neuronetz_default'. With a hardcoded name the cockpit ended up on a network the prod proxy couldn't see and routing silently dropped. Network is now overridable via PSYC_PROXY_NETWORK in .env (default 'backend' keeps dev working). On prod, set PSYC_PROXY_NETWORK=neuronetz_default in .env before the next compose up. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
34 lines
1.5 KiB
Plaintext
34 lines
1.5 KiB
Plaintext
# psyc — per-developer secrets. Copy to `.env` (already gitignored) and fill in.
|
|
#
|
|
# cp .env.example .env
|
|
# # edit .env with your own keys
|
|
#
|
|
# Do not commit .env. Each developer keeps their own keys local.
|
|
|
|
# --- CTI source API keys (sources we may add to Scoutline) ---
|
|
# ThreatFox / abuse.ch — free auth key at https://auth.abuse.ch/
|
|
THREATFOX_AUTH_KEY=
|
|
# AlienVault OTX — free key at https://otx.alienvault.com/api
|
|
OTX_API_KEY=
|
|
# NIST NVD — free key at https://nvd.nist.gov/developers/request-an-api-key
|
|
# (raises throttling from ~5 to ~50 requests / 30s)
|
|
NVD_API_KEY=
|
|
|
|
# --- Production-only: Let's Encrypt email for the acme-companion sidecar ---
|
|
# Used as the contact address for the TLS cert acme-companion issues for
|
|
# psyc.neuronetz.ai. Safe to leave the default in dev (cert isn't issued
|
|
# without a reachable acme-companion + public DNS + :443).
|
|
# LETSENCRYPT_EMAIL=admin@neuronetz.ai
|
|
|
|
# --- Production-only: the docker network the reverse-proxy is on ---
|
|
# Cockpit must share this network with nginx-proxy + acme-companion so the
|
|
# proxy can route to it. Default 'backend' matches AnD0R dev; on cloud
|
|
# production this is typically 'neuronetz_default' (whatever the proxy stack
|
|
# declares — check with `docker network ls`).
|
|
# PSYC_PROXY_NETWORK=neuronetz_default
|
|
|
|
# --- Internal service URLs — overridden in docker compose; defaults for venv CLI ---
|
|
# PSYC_MOCK_CERT_URL=http://127.0.0.1:8770
|
|
# PSYC_INFERENCE_URL=http://127.0.0.1:8771
|
|
# PSYC_DATA_DIR=./data
|