feat: agent deploys — passwordless ssh key (alarm/desk/blanc-nas + gitea), write-scope gitea token, secrets mounts, gitconfig, APPEND_SYSTEM deploy guide

2026-08-20 09:34:17 +02:00
parent b51a3b564f
commit 6d10877e34
11 changed files with 338 additions and 10 deletions
@@ -19,6 +19,7 @@ services:
      # docker.sock bind semantics: bind sources resolve on the HOST, so
      # this must be the HOST path of the pi config (auth.json etc.).
      LVMH_HOST_PI_AGENT_DIR: ${LVMH_PI_AGENT_DIR:-/home/alarm/.dotfiles/pi/agent}
+      LVMH_SECRETS_DIR: /zdata/root/lvmh-secrets
      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
      GEMINI_API_KEY: ${GEMINI_API_KEY:-}
      DEEPSEEK_KEY: ${DEEPSEEK_KEY:-}