Scott KarpandClaude Fable 5.1
d6cf9355fd
The examination is the product; the record of it is what a caller can carry away. Every bedikah was already engraved in L3 — output hash and length, source digests, coupling trace, claims, violations, verdict, never the text — and no caller could get theirs back. - bedikot.key_id (migration): a SHA-256 digest of the courtyard key that brought the offering, never the key; threaded as :key_id through Bedikah.examine from every site that goes through the gate (courtyard bedikah, pair, the gate's pass and stream). Unique index on bedikah_ref. - VavPipeline.Ledger: entry (the examination's fields, none of the database's, not the owner's), canonical JSON (keys sorted at every level, no whitespace, UTF-8), Ed25519 sign/verify, public key, render. Seed from BIKORET_LEDGER_SIGNING_KEY (base64 of 32 bytes) in shorashim-secrets; absent → unsigned and says so. - GET /courtyard/ledger?limit&before — this key's bedikot, newest first, each rendered and signed; GET /courtyard/bedikah/<ref> — one, 404 for another key's or none alike; GET /peah/ledger_key — the public key. - Tamid §1.1 "The ledger" (Doorpost pin moved → 02ddf313…), KOHEN "Issuing a key" (the seed, once), secrets.yaml template. Tests: ledger_test (digest, entry, canonical, sign/verify, unsigned rendering, signed rendering); ledger_l3_test (own records listed newest first and only own; 404 alike for another's and none; an examination engraved under the key reads back signed and verifies against /peah/ledger_key). Elixir 642/0; L3 13/0. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
59 lines
2.7 KiB
Elixir
59 lines
2.7 KiB
Elixir
import Config
|
|
|
|
# Runtime configuration — read from environment variables at boot.
|
|
# This file is evaluated at runtime, not compile time.
|
|
# Required for OTP releases where env vars aren't known at build time.
|
|
|
|
if config_env() == :prod do
|
|
# L3 — PostgreSQL connection
|
|
# The kohen sets DATABASE_URL in the K8s secret
|
|
database_url =
|
|
System.get_env("DATABASE_URL") ||
|
|
raise """
|
|
DATABASE_URL not set.
|
|
The kohen must set the DATABASE_URL in shorashim-secrets.
|
|
Format: ecto://user:password@host:port/database?sslmode=require
|
|
"""
|
|
|
|
config :vav_pipeline, VavPipeline.Repo,
|
|
url: database_url,
|
|
pool_size: String.to_integer(System.get_env("POOL_SIZE") || "20"),
|
|
ssl: true,
|
|
ssl_opts: [verify: :verify_none]
|
|
|
|
# L1 mount point — overridable via env
|
|
config :vav_pipeline,
|
|
l1_mount_point: System.get_env("L1_MOUNT_POINT") || "/mnt/torah",
|
|
mesorah_mount_point: System.get_env("MESORAH_MOUNT_POINT") || "/mnt/mesorah",
|
|
manna_provision_file:
|
|
System.get_env("MANNA_PROVISION_FILE") || "/var/lib/bikoret/manna/today.json",
|
|
talmudic_socket_path:
|
|
System.get_env("TALMUDIC_SOCKET_PATH") || "/tmp/bikoret/talmudic.sock",
|
|
korban_socket_path:
|
|
System.get_env("KORBAN_SOCKET_PATH") || "/tmp/bikoret/korban.sock",
|
|
# The keys themselves are in the file (a mounted Secret), not in env.
|
|
api_keys_file: System.get_env("API_KEYS_FILE") || "/etc/bikoret/secrets/api_keys",
|
|
# The ingress controller's network: only from there is X-Real-IP the
|
|
# caller's address (BigdeiKodesh.Mishmar.peer/1). Comma-separated CIDRs.
|
|
trusted_proxies:
|
|
(System.get_env("TRUSTED_PROXIES") || "")
|
|
|> String.split(",", trim: true)
|
|
|> Enum.map(&String.trim/1),
|
|
# Shoresh Engine binary — VavPipeline.ShoreshEnginePort opens an
|
|
# Erlang Port with {:spawn_executable, binary}, which spawns a CHILD
|
|
# PROCESS OF THIS CONTAINER. A Port cannot cross a container
|
|
# boundary, so the Haskell binary has to be on this container's
|
|
# filesystem, not only in the shoresh-engine image. deployment.yaml
|
|
# stages it onto a shared volume with an init container and points
|
|
# this variable at it. Without the override, Application.
|
|
# maybe_add_shoresh_port/3 finds nothing on PATH and logs
|
|
# "running without Haskell engine" — the system comes up DEGRADED
|
|
# and says so only in a warning line.
|
|
shoresh_engine_binary:
|
|
System.get_env("SHORESH_ENGINE_BINARY") || "shoresh-engine",
|
|
http_port: String.to_integer(System.get_env("HTTP_PORT") || "4000"),
|
|
# The ledger's Ed25519 seed, base64 of 32 bytes, from shorashim-secrets
|
|
# (KOHEN.md, "Issuing a key"). Absent → records are given unsigned and say so.
|
|
ledger_signing_key: System.get_env("BIKORET_LEDGER_SIGNING_KEY")
|
|
end
|