diff options
| author | Paul Buetow <paul@buetow.org> | 2026-04-14 22:42:12 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-04-14 22:42:12 +0300 |
| commit | a911c4e690608a9a8430e928fe1853f4a217fbda (patch) | |
| tree | 598d2775b7ed1c757b96f3dbd10ad0c6caad2f21 /frontends/README.md | |
| parent | 2a81b54c59ff937f66d42bf7aa625c5e30d62321 (diff) | |
frontends: daily goprecords uptimed upload for fishfinger and blowfish.
Add POSIX sh script template deployed to /usr/local/bin/goprecords-upload.sh,
invoked from /etc/daily.local. Rex task goprecords_upload installs curl, renders
per-host script from geheim secrets/etc/goprecords/<host>.token, and hooks
commons. Document token layout and kubectl key creation in README.
Made-with: Cursor
Diffstat (limited to 'frontends/README.md')
| -rw-r--r-- | frontends/README.md | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/frontends/README.md b/frontends/README.md index e2d59d9..2df2113 100644 --- a/frontends/README.md +++ b/frontends/README.md @@ -1,3 +1,23 @@ # Frontends Rexify my internet facing frontend servers! + +## goprecords upload (fishfinger, blowfish) + +Uptimed stats are pushed once per day from **`/etc/daily.local`** via **`/usr/local/bin/goprecords-upload.sh`** (POSIX **`sh`**, deploy **`rex goprecords_upload`** or **`rex commons`**). + +Bearer tokens live in **geheim** as plain text (one line, no newline): + +- **`secrets/etc/goprecords/fishfinger.token`** +- **`secrets/etc/goprecords/blowfish.token`** + +Issue or rotate keys on the goprecords daemon (Kubernetes example): + +```bash +kubectl exec -n services deployment/goprecords -- \ + goprecords --create-client-key fishfinger -stats-dir=/data/stats +kubectl exec -n services deployment/goprecords -- \ + goprecords --create-client-key blowfish -stats-dir=/data/stats +``` + +Then update the matching **`secrets/etc/goprecords/<host>.token`** file and re-run **`rex goprecords_upload`** (or **`commons`**) so the script on each host is regenerated. |