feat: restructure PSD repo (P7) and add operator setup templates + checklist

2026-08-13 16:14:32 +02:00
parent aa22183ac7
commit 3046ac34c6
8 changed files with 167 additions and 1 deletions
@@ -0,0 +1,7 @@
+# File operatore reali (contengono o referenziano segreti): non tracciare.
+operator.env
+workspace-bindings.env
+thothii-installation.yaml
+connector-secrets.yaml
+secrets/*
+!secrets/.gitkeep
@@ -0,0 +1,16 @@
+# Copia in deploy/psd/operator.env (non tracciato). Solo path non-segreti.
+THT_WORKSPACE_GIT_REMOTE=<URL-del-repo-github-del-workspace>
+THT_WORKSPACE_GIT_BRANCH=main
+THT_WORKSPACE_INSTALLATION_ID=psd-local
+THT_WORKSPACE_GIT_AUTHOR_NAME="Thoth PSD"
+THT_WORKSPACE_GIT_AUTHOR_EMAIL=thoth-psd@example.invalid
+THT_WORKSPACE_BINDINGS_ENV_FILE=<abs>/deploy/psd/workspace-bindings.env
+
+# Credenziali/secrets: path HOST (mai il contenuto).
+THT_SECRETS_FILE=<abs>/deploy/psd/secrets/thothii.secrets
+PI_AUTH_FILE=<abs>/deploy/psd/secrets/pi-auth.json
+THT_WS_PSD_CLINICAL_DWH_API_KEY_SOURCE=<abs>/deploy/psd/secrets/psd-clinical-dwh-api-key
+# Opzionale (solo con CA interna):
+THT_WS_PSD_CLINICAL_DWH_TLS_CA_SOURCE=<abs>/deploy/psd/secrets/psd-clinical-dwh-ca.pem
+# Git HTTPS privato:
+THT_WORKSPACE_GIT_CREDENTIALS_FILE=<abs>/deploy/psd/secrets/git-credentials
@@ -0,0 +1,8 @@
+# Copia in deploy/psd/thothii-installation.yaml. Sostituisci i path assoluti.
+# Seleziona UN solo override Git (https o ssh).
+profile: local
+projectDirectory: "<abs>/projects/ThothII"
+envFile: "<abs>/projects/ThothII/deploy/psd/operator.env"
+overrides:
+  - "<abs>/projects/ThothII/deploy/compose.git-https.yaml"
+  - "<abs>/projects/ThothII/deploy/psd/connector-secrets.yaml"
@@ -0,0 +1,8 @@
+# Copia in un file operatore non tracciato (workspace-bindings.env).
+# Contiene SOLO bindings THT_WS_* non segreti. I *_FILE sono path DI CONTENITORE
+# (/run/secrets/...), popolati dal connector override generato dai *_SOURCE dell'operatore env.
+THT_WS_PSD_CLINICAL_DWH_TRANSPORT=rest_api
+THT_WS_PSD_CLINICAL_DWH_BASE_URL=https://supabase-aritmolab.policlinicosandonato.it/dwh/
+THT_WS_PSD_CLINICAL_DWH_API_KEY_FILE=/run/secrets/psd-clinical-dwh-api-key
+# Opzionale: solo se il DWH REST presenta una CA interna/privata.
+THT_WS_PSD_CLINICAL_DWH_TLS_CA_FILE=/run/secrets/psd-clinical-dwh-ca.pem