james.maesandCodex
1a0964ef23
* chore(standards): preserve owned-source copyright notices Add accurate repository copyright and license comments to 50 owned source/build/configuration files. Preserve existing holders, upstream wrappers, legal payloads and schema/data exemptions. Exact inverse-byte reconstruction and applicable parser/token/AST checks prove comment-only changes; existing relevant regressions pass. Co-Authored-By: Codex (GPT-6) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com> * chore: enforce owned source copyright notices Check real leading comments against explicit repository provenance and retain existing native style gates. Co-Authored-By: Codex GPT-6 <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com> --------- Signed-off-by: James Maes <james@kof22.com> Co-authored-by: Codex (GPT-6) <noreply@openai.com>
79 lines
2.7 KiB
YAML
79 lines
2.7 KiB
YAML
# Copyright 2026 Kingsrook, LLC
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
# Opt-in unpublished core qualification. No service is a replacement for the
|
|
# released RC.20 TABLE development host or an installed printing deployment.
|
|
services:
|
|
authentik-server:
|
|
networks:
|
|
default:
|
|
aliases:
|
|
- auth.printing.internal
|
|
- qqq.printing.internal
|
|
- callback.printing.internal
|
|
|
|
native-tls:
|
|
profiles: [native-auth]
|
|
image: caddy@sha256:5f5c8640aae01df9654968d946d8f1a56c497f1dd5c5cda4cf95ab7c14d58648
|
|
platform: linux/amd64
|
|
network_mode: service:authentik-server
|
|
depends_on: [authentik-server]
|
|
volumes:
|
|
- ${DEV_SOURCE_DIR}/dev/native-auth/Caddyfile:/etc/caddy/Caddyfile:ro
|
|
- ${DEV_SOURCE_DIR}/dev/native-auth/copy-root.sh:/etc/caddy/copy-root.sh:ro
|
|
- native-ca:/data
|
|
- native-trust:/trust
|
|
labels:
|
|
io.qrun.printing.dev: ${PRINTING_DEV_PROJECT}
|
|
cpus: 1
|
|
mem_limit: 256m
|
|
|
|
native-qqq:
|
|
profiles: [native-auth]
|
|
build:
|
|
context: ${DEV_SOURCE_DIR}
|
|
dockerfile: dev/native-auth/Dockerfile.server
|
|
image: ${PRINTING_DEV_PROJECT}-native-server:local
|
|
environment:
|
|
NATIVE_QQQ_PORT: "19082"
|
|
NATIVE_QQQ_ORIGIN: https://qqq.printing.internal
|
|
NATIVE_QQQ_DATABASE_PASSWORD: ${NATIVE_QQQ_DATABASE_PASSWORD:?Initialize experimental state first}
|
|
NATIVE_QQQ_REFRESH_KEY: ${NATIVE_QQQ_REFRESH_KEY:?Initialize experimental state first}
|
|
NATIVE_AUTH_ISSUER: ${NATIVE_AUTH_ISSUER:?Initialize experimental state first}
|
|
NATIVE_AUTH_CLIENT_ID: ${NATIVE_AUTH_CLIENT_ID:?Initialize experimental state first}
|
|
NATIVE_AUTH_CLIENT_SECRET: ${NATIVE_AUTH_CLIENT_SECRET:?Initialize experimental state first}
|
|
NATIVE_AUTH_REDIRECT_URI: https://callback.printing.internal/oauth/callback
|
|
volumes:
|
|
- native-trust:/trust:ro
|
|
- native-qqq-data:/data
|
|
labels:
|
|
io.qrun.printing.dev: ${PRINTING_DEV_PROJECT}
|
|
cpus: 2
|
|
mem_limit: 1g
|
|
|
|
native-client:
|
|
profiles: [native-auth]
|
|
build:
|
|
context: ${DEV_SOURCE_DIR}
|
|
dockerfile: dev/native-auth/Dockerfile.client
|
|
image: ${PRINTING_DEV_PROJECT}-native-client:local
|
|
volumes:
|
|
- native-trust:/trust:ro
|
|
- ${NATIVE_AUTH_INPUT_FILE:?Initialize experimental state first}:/work/input.json:ro
|
|
- ${NATIVE_AUTH_RESULT_FILE:?Initialize experimental state first}:/work/result.json
|
|
labels:
|
|
io.qrun.printing.dev: ${PRINTING_DEV_PROJECT}
|
|
cpus: 2
|
|
mem_limit: 512m
|
|
|
|
volumes:
|
|
native-ca:
|
|
labels:
|
|
io.qrun.printing.dev: ${PRINTING_DEV_PROJECT}
|
|
native-trust:
|
|
labels:
|
|
io.qrun.printing.dev: ${PRINTING_DEV_PROJECT}
|
|
native-qqq-data:
|
|
labels:
|
|
io.qrun.printing.dev: ${PRINTING_DEV_PROJECT}
|