rblundon
6112b6daea
- Create roles/paperclip-docker with full Docker Compose stack deployment - Template OpenCode v1.2.24 config (provider structure) with Gemma-4-26B model - Integrate vLLM endpoint (localhost:8000) with vault-injected API key auth - Wire secrets from ansible vault: vllm_api_key, cloudflare_token, paperclip auth secrets - Add pre-deployment checks (PostgreSQL, nginx, certbot cert management) - Implement idempotent stack lifecycle (containers, volumes, networking) - Deploy to RTX 3090 via muppet-vision.wdw-labs.cloud with nginx SSL termination Paperclip now serves as CEO reasoning engine with local Gemma inference, accessible to Hermes platform agents via OpenCode adapter on shared vLLM.
31 lines
1.1 KiB
YAML
31 lines
1.1 KiB
YAML
---
|
|
# Paperclip deployment paths and configuration
|
|
paperclip_base_path: /opt/paperclip
|
|
paperclip_data_dir: "{{ paperclip_base_path }}/data"
|
|
paperclip_certs_dir: "{{ paperclip_base_path }}/certs"
|
|
paperclip_port: 3100
|
|
paperclip_domain: muppet-vision.wdw-labs.cloud
|
|
paperclip_host: 127.0.0.1
|
|
|
|
# Paperclip allowed hostnames (space or comma-separated)
|
|
# Includes: domain name, localhost (for internal/local access), and client IP
|
|
paperclip_allowed_hostnames: "{{ paperclip_domain }} localhost 192.168.10.50"
|
|
|
|
# Deployment mode: authenticated (requires login) or local_trusted (no auth, trusted network)
|
|
paperclip_deployment_mode: "local_trusted"
|
|
|
|
# Reverse proxy configuration
|
|
nginx_port: 443
|
|
nginx_http_port: 80
|
|
|
|
# HTTPS/SSL configuration
|
|
certbot_email: ryan.blundon@protonmail.com
|
|
certbot_provider: cloudflare
|
|
|
|
# Inference endpoint (vLLM or remote OpenAI-compatible)
|
|
vllm_endpoint: "http://127.0.0.1:8000"
|
|
|
|
# NOTE: Authentication secrets (BETTER_AUTH_SECRET, PAPERCLIP_AGENT_JWT_SECRET)
|
|
# are auto-generated during deployment and stored in .env (mode 0600)
|
|
# No need to specify them here — they're created with: openssl rand -hex 24
|