The test stack was set up under /home/spencerm/packetstation/test because the session had no sudo. DEPLOY.md describes /etc/packetstation/ with secrets root:10001 mode 0440. The test secrets are world-readable inside the home folder until moved.
To do: move stack.env, secrets/, ca/ and backups/, fix ownership and modes, update ENV_FILE, SECRETS_DIR, CA_BUNDLE_FILE and BACKUP_DIR in stack.env, restart the stack.
Plan reference: OPS2 in docs/PLAN.md (open questions). Answer here; the build takes the default until then.
The test stack was set up under /home/spencerm/packetstation/test because the session had no sudo. DEPLOY.md describes /etc/packetstation/<stack> with secrets root:10001 mode 0440. The test secrets are world-readable inside the home folder until moved.
**To do:** move stack.env, secrets/, ca/ and backups/, fix ownership and modes, update ENV_FILE, SECRETS_DIR, CA_BUNDLE_FILE and BACKUP_DIR in stack.env, restart the stack.
---
Plan reference: OPS2 in [docs/PLAN.md](https://gt.pescoinc.biz/spencerm/PacketStation/src/branch/main/docs/PLAN.md) (open questions). Answer here; the build takes the default until then.
Applied: the test stack stays under /home/spencerm/packetstation/test, and the docs and test.env.example now say so. One thing this issue does not settle: should the production stack follow the same layout (/home/spencerm/packetstation/prod, with stack.env, secrets/, ca/ and backups/), or stay at /etc/packetstation/prod with secrets root:10001 mode 0440 as DEPLOY.md describes? The docs keep /etc/packetstation/prod until you answer.
Applied: the test stack stays under /home/spencerm/packetstation/test, and the docs and test.env.example now say so. One thing this issue does not settle: should the production stack follow the same layout (/home/spencerm/packetstation/prod, with stack.env, secrets/, ca/ and backups/), or stay at /etc/packetstation/prod with secrets root:10001 mode 0440 as DEPLOY.md describes? The docs keep /etc/packetstation/prod until you answer.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
The test stack was set up under /home/spencerm/packetstation/test because the session had no sudo. DEPLOY.md describes /etc/packetstation/ with secrets root:10001 mode 0440. The test secrets are world-readable inside the home folder until moved.
To do: move stack.env, secrets/, ca/ and backups/, fix ownership and modes, update ENV_FILE, SECRETS_DIR, CA_BUNDLE_FILE and BACKUP_DIR in stack.env, restart the stack.
Plan reference: OPS2 in docs/PLAN.md (open questions). Answer here; the build takes the default until then.
This actually is fine because it matches the other docker compose setups that are on that server. So leave it as is under /home/spencerm
Applied: the test stack stays under /home/spencerm/packetstation/test, and the docs and test.env.example now say so. One thing this issue does not settle: should the production stack follow the same layout (/home/spencerm/packetstation/prod, with stack.env, secrets/, ca/ and backups/), or stay at /etc/packetstation/prod with secrets root:10001 mode 0440 as DEPLOY.md describes? The docs keep /etc/packetstation/prod until you answer.