mirrors/pikasTech-unidesk
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: use owner-level unidesk state

Browse Source
This commit is contained in:
Codex
2026-07-10 05:09:13 +02:00
parent 01ff35d0f8
commit fbd9dbbae1
48 changed files with 133 additions and 148 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/agentrun.yaml
+1 -1
View File
@@ -398,7 +398,7 @@ controlPlane:
key: GH_TOKEN
unideskSshToken:
id: tool-unidesk-ssh-token
sourceRef: /root/unidesk/.state/docker-compose.env
sourceRef: /root/.unidesk/.state/docker-compose.env
sourceKey: UNIDESK_SSH_CLIENT_TOKEN
targetRef:
namespace: agentrun-v02
config/deploy-ssh-identities.yaml
+1 -1
View File
@@ -11,7 +11,7 @@ defaults:
identityId: github.com
sources:
root: /root/unidesk/.state/secrets
root: /root/.unidesk/.state/secrets
identities:
github.com:
config/hwlab-access-control-secrets.yaml
+1 -1
View File
@@ -8,7 +8,7 @@ metadata:
- 2187
sources:
root: /root/unidesk/.state/secrets
root: /root/.unidesk/.state/secrets
files:
- sourceRef: hwlab/d601-v03-preset-users.env
type: env
config/hwlab-test-accounts.yaml
+1 -1
View File
@@ -9,7 +9,7 @@ metadata:
- 1237
- 1236
sourceRoot: /root/unidesk/.state/secrets
sourceRoot: /root/.unidesk/.state/secrets
targets:
- id: d601-v03
config/platform-db/postgres-nc01.yaml
+1 -1
View File
@@ -116,7 +116,7 @@ postgres:
secrets:
source: master-local
root: /root/unidesk/.state/secrets
root: /root/.unidesk/.state/secrets
entries:
- name: agentrun-nc01-v02-db-credentials
sourceRef: platform-db/agentrun-nc01-v02-db.env
config/platform-db/postgres-pk01.yaml
+1 -1
View File
@@ -362,7 +362,7 @@ postgres:
secrets:
source: master-local
root: /root/unidesk/.state/secrets
root: /root/.unidesk/.state/secrets
entries:
- name: sub2api-db-credentials
sourceRef: platform-db/sub2api-db.env
config/platform-infra/gitea.yaml
+1 -1
View File
@@ -286,7 +286,7 @@ app:
publicExposure:
enabled: true
publicBaseUrl: https://gitea.pikapython.com
secretRoot: /root/unidesk/.state/secrets
secretRoot: /root/.unidesk/.state/secrets
dns:
hostname: gitea.pikapython.com
expectedA: 82.156.23.220
config/platform-infra/host-proxy.yaml
+3 -3
View File
@@ -18,7 +18,7 @@ server:
serviceName: sub2api-master-egress-proxy
containerName: unidesk-sub2api-master-egress-proxy
image: ghcr.io/shadowsocks/ssserver-rust:latest
configPath: /root/unidesk/.state/secrets/platform-infra/sub2api-master-egress-proxy.config.json
configPath: /root/.unidesk/.state/secrets/platform-infra/sub2api-master-egress-proxy.config.json
listenHost: 0.0.0.0
listenPort: 18792
health:
@@ -95,11 +95,11 @@ templates:
mode: trans-static-binary
upstreamUrl: https://github.com/SagerNet/sing-box/releases/download/v1.13.14/sing-box-1.13.14-linux-amd64.tar.gz
version: v1.13.14
archiveCachePath: .state/artifacts/platform-infra/sing-box-1.13.14-linux-amd64.tar.gz
archiveCachePath: /root/.unidesk/.state/artifacts/platform-infra/sing-box-1.13.14-linux-amd64.tar.gz
archiveSha256: f48703461a15476951ac4967cdad339d986f4b8096b4eb3ff0829a500502d697
archiveInstallPath: /var/cache/unidesk/host-egress-proxy/sing-box-1.13.14-linux-amd64.tar.gz
binaryMember: sing-box-1.13.14-linux-amd64/sing-box
binaryCachePath: .state/artifacts/platform-infra/sing-box-1.13.14-linux-amd64
binaryCachePath: /root/.unidesk/.state/artifacts/platform-infra/sing-box-1.13.14-linux-amd64
binarySha256: 68aeab83cc4ab2659a5b92232261a20746ccdafc3b3d1e19b2d63247eec3bbf7
installPath: /usr/local/bin/sing-box
configPath: /etc/unidesk/host-egress-proxy/sing-box.json
config/platform-infra/langbot.yaml
+1 -1
View File
@@ -67,7 +67,7 @@ runtime:
sslMode: require
appDatabaseValue: langbot?ssl=require
secrets:
root: /root/unidesk/.state/secrets
root: /root/.unidesk/.state/secrets
appSourceRef: platform-infra/langbot.env
storage:
data:
config/platform-infra/n8n.yaml
+1 -1
View File
@@ -67,7 +67,7 @@ runtime:
sslMode: require
sslRejectUnauthorized: false
secrets:
root: /root/unidesk/.state/secrets
root: /root/.unidesk/.state/secrets
appSourceRef: platform-infra/n8n.env
encryptionKey: N8N_ENCRYPTION_KEY
storage:
config/platform-infra/sub2api-master-egress-proxy.compose.yaml
+1 -1
View File
@@ -12,5 +12,5 @@ services:
ports:
- "0.0.0.0:18792:18792/tcp"
volumes:
- /root/unidesk/.state/secrets/platform-infra/sub2api-master-egress-proxy.config.json:/etc/shadowsocks-rust/config.json:ro
- /root/.unidesk/.state/secrets/platform-infra/sub2api-master-egress-proxy.config.json:/etc/shadowsocks-rust/config.json:ro
logging: *unidesk-log-rotation
config/platform-infra/sub2api.yaml
+1 -1
View File
@@ -441,7 +441,7 @@ runtime:
sslMode: require
pendingAllowed: true
secrets:
root: /root/unidesk/.state/secrets
root: /root/.unidesk/.state/secrets
appSourceRef: platform-infra/sub2api.env
redis:
serviceName: sub2api-redis
config/platform-infra/wechat-archive.yaml
+2 -2
View File
@@ -46,7 +46,7 @@ n8n:
archiveCallback:
publicUrl: http://74.48.78.17:18081/webhooks/wechat-archive
secretRoot: /root/unidesk/.state/secrets
secretRoot: /root/.unidesk/.state/secrets
tokenSourceRef: platform-infra/wechat-archive.env
tokenKey: UNIDESK_WECHAT_ARCHIVE_TOKEN
timeoutMs: 90000
@@ -160,7 +160,7 @@ baiduNetdisk:
proxyMode: backend-core-microservice-proxy
configRef: config.json#microservices.baidu-netdisk
staging:
hostRoot: /root/unidesk/.state/baidu-netdisk/staging
hostRoot: /root/.unidesk/.state/baidu-netdisk/staging
containerRoot: /data/staging
outboxDir: wechat-archive/outbox
pullDir: wechat-archive/pulls
config/secrets-distribution.yaml
+1 -1
View File
@@ -11,7 +11,7 @@ metadata:
- 2256
sources:
root: /root/unidesk/.state/secrets
root: /root/.unidesk/.state/secrets
files:
- sourceRef: platform-db/langbot-db.env
type: env
config/unidesk-cli.yaml
+15 -15
View File
@@ -62,27 +62,27 @@ gc:
enabled: false
keepDays: 14
fileRoots:
e2e: .state/e2e
validation: .state/validation
jobs: .state/jobs
codex-queue-output-archive: .state/codex-queue/output-archive
e2e: /root/.unidesk/.state/e2e
validation: /root/.unidesk/.state/validation
jobs: /root/.unidesk/.state/jobs
codex-queue-output-archive: /root/.unidesk/.state/codex-queue/output-archive
dirRoots:
deploy-exports: .state/deploy/exports
deploy-resolve: .state/deploy/resolve
deploy-exports: /root/.unidesk/.state/deploy/exports
deploy-resolve: /root/.unidesk/.state/deploy/resolve
stateStaleScratch:
enabled: false
keepHours: 24
fileRoots:
playwright-cli-screenshots: .state/playwright-cli/screenshots
playwright-cli-sessions: .state/playwright-cli/sessions
perf: .state/perf
tmp: .state/tmp
web-observe: .state/web-observe
playwright-cli-screenshots: /root/.unidesk/.state/playwright-cli/screenshots
playwright-cli-sessions: /root/.unidesk/.state/playwright-cli/sessions
perf: /root/.unidesk/.state/perf
tmp: /root/.unidesk/.state/tmp
web-observe: /root/.unidesk/.state/web-observe
dirRoots:
hwlab-cd: .state/hwlab-cd
codex-queue-stats-verify: .state/codex-queue-stats-verify
codex-queue-perf: .state/codex-queue-perf
tmp: .state/tmp
hwlab-cd: /root/.unidesk/.state/hwlab-cd
codex-queue-stats-verify: /root/.unidesk/.state/codex-queue-stats-verify
codex-queue-perf: /root/.unidesk/.state/codex-queue-perf
tmp: /root/.unidesk/.state/tmp
legacyDockerImages:
enabled: true
minAgeHours: 12
config/unidesk-host-k8s.yaml
+3 -3
View File
@@ -108,7 +108,7 @@ services:
logFile: /var/log/unidesk/decision-center.jsonl
database:
sourceRef:
path: .state/secrets/decision-center/nc01-db.env
path: /root/.unidesk/.state/secrets/decision-center/nc01-db.env
key: DATABASE_URL
secretName: decision-center-runtime-secrets
secretKey: DATABASE_URL
@@ -162,7 +162,7 @@ services:
logFile: /var/log/unidesk/todo-note.jsonl
database:
sourceRef:
path: .state/secrets/decision-center/nc01-db.env
path: /root/.unidesk/.state/secrets/decision-center/nc01-db.env
key: DATABASE_URL
secretName: decision-center-runtime-secrets
secretKey: DATABASE_URL
@@ -240,7 +240,7 @@ runtimeAuth:
runtimeSecrets:
sourceRef:
path: .state/secrets/unidesk-host-k8s.env
path: /root/.unidesk/.state/secrets/unidesk-host-k8s.env
target:
name: unidesk-runtime-secrets
keys: