Clio Liu
2b8f88d01f
02-environment merges the old 02-env and 03-containers - both answered the
same question, 'where does this run and how do I reach it', and were split
for no reason.
README.md the two hosts, access, ports, secrets, health
checks, known issues
YAU_Linux_Host_Onboarding.md the Linux host's own brief, copied with a
provenance banner: owned by the host owner, not
maintained here, and its 'save this as CLAUDE.md'
instruction does not apply in this repo
openplc-container.md the container as read from the running host
openplc-compose.yml verbatim copy of the live file
MIGRATION.md moving the container - as-built plus runbook
secrets.local.md.template the shape of the git-ignored secrets file
The README leads with the fact that shapes every decision on that machine:
yau-sls-poc-lin001 is a SHARED, LIVE host running ~28 containers for
several projects behind Caddy and Authelia, and this project owns exactly
one of them. Never restart Caddy or Authelia, never publish on 0.0.0.0,
never put growing data on the 62 GB root disk.
Records four known issues rather than leaving them in anyone's head: the
100 ms scan overruns, the 354 MB migration tarballs still sitting on the
host with the JWT secret inside one of them, the runtime image existing in
no registry, and the missing Editor toolchain.
Not carried across: Host_Documentation.md. ~400 lines on ChirpStack,
Forgejo, EQP licensing and the Telegraf fleet - none of it WRPS, owned
elsewhere, and a stale copy here would be worse than a pointer.
50 lines
1.5 KiB
Text
50 lines
1.5 KiB
Text
# Secrets — NOT COMMITTED
|
|
|
|
Copy this file to `secrets.local.md` and fill it in. That name is git-ignored
|
|
(`*.local.md` in `.gitignore`); this template is not, so **never put a real
|
|
value in this file**.
|
|
|
|
Everything here is referenced from the repo by *location*, never inlined.
|
|
|
|
---
|
|
|
|
## OpenPLC Runtime v4 REST API
|
|
|
|
Host `yau-sls-poc-lin001`, `https://10.0.0.17:8443` — self-signed cert, so
|
|
clients need `-k` / accept-on-first-connect.
|
|
|
|
| | |
|
|
|---|---|
|
|
| Username | `admin` |
|
|
| Password | `<fill in>` |
|
|
|
|
Used by: the OpenPLC Editor when connecting to the runtime (`03-plc/DEPLOY.md`
|
|
§B3), and by any direct `POST /api/login` for a JWT.
|
|
|
|
> The password and the JWT secret travel inside the container volume
|
|
> (`restapi.db` and `.env`). A migrated container keeps the same credentials —
|
|
> see `MIGRATION.md` Appendix 2.
|
|
|
|
## Yokogawa CI Server
|
|
|
|
Host `yau-poc-cicore1`, `10.0.0.21`.
|
|
|
|
| | |
|
|
|---|---|
|
|
| Username | `<fill in>` |
|
|
| Password | `<fill in>` |
|
|
|
|
## SSH to the Linux host
|
|
|
|
The key is a **file**, not a value to paste here:
|
|
|
|
~/.ssh/yau-sls-poc-lin001_key.pem chmod 600, or SSH refuses it
|
|
|
|
Obtain it from the host owner over a secure channel. Never commit it — the
|
|
`.gitignore` blocks `*.pem`, but do not rely on that alone.
|
|
|
|
## Not this project's secrets
|
|
|
|
Host-level credentials — Grafana, InfluxDB, Authelia, Portainer, Forgejo admin
|
|
logins and API tokens — belong to the host owner and live in their
|
|
`Linux Machine Config.txt`. Ask for them; do not copy them into this repo.
|