- Add EnvironmentFile=/home/coding/.config/fabric/secrets.env to
scripts/fabric-web.service so the auth token is loaded from the
secrets file at start (not exposed in ps aux)
- Add --otlp-http :4318 to match the deployed unit (already live)
The full auth chain is now documented in the service template:
~/.config/fabric/secrets.env (0600) → EnvironmentFile → server
~/.needle/config.yaml auth_token: "${FABRIC_AUTH_TOKEN}" → NEEDLE
POST /api/events returns 401 without token; NEEDLE workers
authenticate via Bearer token sourced from the same secrets file.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| br-get-next-bead.sh | ||
| br-ready-jsonl.sh | ||
| br-ready-queue.sh | ||
| br-ready-workaround.sh | ||
| br-ready-wrapper.sh | ||
| br-regenerate-queue.sh | ||
| fabric-web.service | ||
| fabric-web.sh | ||
| service.sh | ||