# huttese

The image is built in `sr/`.

Volume mounts are in the top-level directory.

Makefile is in the top-level directory.


## To-Do

nginx proxying is not working.

need metasrht service to become accessible so that i can register oauth for git, lists, todo services.

should also setup the metasrht-webhook process (`celery -A metasrht.webhooks worker --loglevel=info`).

maybe should run migration (`metasrht-migrate -a upgrade head`) every time?

probably should not be running most of these services as `root`.
[apkbuilds repo](https://git.sr.ht/~sircmpwn/sr.ht-apkbuilds/tree) indicates that metasrht (and friends) run as `meta`.
Probably have `git`, `lists`, `todo`, and `build` users.

most importantly, need to figure out how to secure pgp keys, worker private key, network private key, and webhook private key.

cleanup the postgres files, probably to a `pg` directory.


## Installation

Disable the haproxy docker container.

Paste the following into the hosts file:

```
127.0.0.1       git.intra.dominic-ricottone.com lists.intra.dominic-ricottone.com meta.intra.dominic-ricottone.com todo.intra.dominic-ricottone.com
```

Run `make setup && make image && make dbinit && make start`.

For subsequent use, run `make image && make dbmigrate && make start`.

Or to just restart the service if stopped, try `make restart`.