Deeman
95f881827e
feat(infra): replace Pulumi ESC with SOPS in bootstrap + setup scripts
...
- bootstrap_supervisor.sh: remove esc CLI + PULUMI_ACCESS_TOKEN; install
sops+age; check age keypair exists; decrypt .env.prod.sops → .env;
checkout latest release tag; use uv sync --all-packages
- setup_server.sh: add age keypair generation at /opt/materia/age-key.txt;
install age binary; print public key with .sops.yaml instructions
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-26 12:03:11 +01:00
Deeman
9a67617f6a
infra: fix CRLF line endings in setup_server.sh
2026-02-22 15:24:22 +01:00
Deeman
7153be899c
infra: rename app user to beanflows_service
2026-02-22 15:14:44 +01:00
Deeman
8d6d79345c
infra: add setup_server.sh for one-time server provisioning
...
Creates the beanflows system user, /opt/beanflows directory, and an
ed25519 GitLab deploy key. Prints the public key to add as a read-only
deploy key on the repo.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-22 15:12:21 +01:00
