Traefik as the server-wide edge (TLS via Let's Encrypt, dashboard on traefik.petrolyst.com behind oauth2-proxy and Keycloak). The fuel-monitoring stack: Superset on atoma.petrolyst.com with Keycloak login and Petrolyst branding, Trino reading the TimescaleDB fuel-db as catalog "fuel". Customization lives in petrolyst-insights/, deployment in the other folders. Deploys run server-side (deploy/deploy.sh) from a Gitea workflow or manually; releases are immutable, Superset metadata is backed up before migrations, and deploy/rollback.sh restores it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
12 lines
255 B
Plaintext
12 lines
255 B
Plaintext
# Secrets and server env files live only on the server (/opt/petrolyst/).
|
|
*.env
|
|
.env*
|
|
secrets/
|
|
# CI deploy key, generated here during first-time setup (README, Gitea step 3)
|
|
petrolyst-ci
|
|
petrolyst-ci.pub
|
|
# Local test runs
|
|
.scratch/
|
|
.DS_Store
|
|
__pycache__/
|