up

deploy/compose/env/airgap.env.example

@@ -1,13 +1,13 @@
-# Substitutions for docker-compose.airgap.yaml
-MONGO_INITDB_ROOT_USERNAME=stellaops
-MONGO_INITDB_ROOT_PASSWORD=airgap-password
-MINIO_ROOT_USER=stellaops-offline
+# Substitutions for docker-compose.airgap.yaml
+MONGO_INITDB_ROOT_USERNAME=stellaops
+MONGO_INITDB_ROOT_PASSWORD=airgap-password
+MINIO_ROOT_USER=stellaops-offline
 MINIO_ROOT_PASSWORD=airgap-minio-secret
 MINIO_CONSOLE_PORT=29001
 RUSTFS_HTTP_PORT=8080
 AUTHORITY_ISSUER=https://authority.airgap.local
-AUTHORITY_PORT=8440
-SIGNER_POE_INTROSPECT_URL=file:///offline/poe/introspect.json
+AUTHORITY_PORT=8440
+SIGNER_POE_INTROSPECT_URL=file:///offline/poe/introspect.json
 SIGNER_PORT=8441
 ATTESTOR_PORT=8442
 # Secrets for Issuer Directory are provided via issuer-directory.mongo.env (see etc/secrets/issuer-directory.mongo.secret.example).
@@ -33,7 +33,10 @@ SCANNER_SURFACE_CACHE_ROOT=/var/lib/stellaops/surface
 ZASTAVA_SURFACE_FS_ENDPOINT=${SCANNER_SURFACE_FS_ENDPOINT}
 ZASTAVA_SURFACE_CACHE_ROOT=${SCANNER_SURFACE_CACHE_ROOT}
 SCANNER_SURFACE_SECRETS_PROVIDER=file
+SCANNER_SURFACE_SECRETS_NAMESPACE=
 SCANNER_SURFACE_SECRETS_ROOT=/etc/stellaops/secrets
+SCANNER_SURFACE_SECRETS_FALLBACK_PROVIDER=
+SURFACE_SECRETS_HOST_PATH=./offline/surface-secrets
 SCHEDULER_QUEUE_KIND=Nats
 SCHEDULER_QUEUE_NATS_URL=nats://nats:4222
 SCHEDULER_STORAGE_DATABASE=stellaops_scheduler

deploy/compose/env/wine-csp.env.example

@@ -43,7 +43,10 @@ ASPNETCORE_ENVIRONMENT=Production
 # - Wine prefix:    /home/winecsp/.wine      (persistent storage)
 # - CSP installer:  /opt/cryptopro           (read-only mount)
 # - Logs:           /var/log/wine-csp        (log output)
+# - CSP packages:   /opt/cryptopro/downloads (bind from <repo>/opt/cryptopro/downloads)
 #
 # Example mount for CSP installer:
 #   volumes:
 #     - /path/to/your/csp-5.0.msi:/opt/cryptopro/csp-installer.msi:ro
+#   volumes:
+#     - ../../opt/cryptopro/downloads:/opt/cryptopro/downloads:ro