Publish documentation for 2f53512e4d

2026-09-26 22:42:08 +00:00
commit cb50f5a6a4
55 changed files with 33829 additions and 0 deletions
@@ -0,0 +1,49 @@
+# Copy this file to a protected operator path named exactly thothii-installation.yaml
+# and set mode 0600 (or 0400) before using it as THT_INSTALLATION_CONFIG_SOURCE.
+# Replace every absolute placeholder. Select exactly one Git transport override.
+schemaVersion: 2
+profile: server
+# Standalone server with protected direct OIDC auth, not the Omics upstream path.
+# For Omics use authentication-upstream.md: embedded, no auth runtime projection.
+shell:
+  mode: full
+  defaultLocale: en
+projectDirectory: "/absolute/path/to/ThothII"
+envFile: "/absolute/path/to/thothii-server-operator/server.env"
+workspaceRepository:
+  remote: git@git.example.com:organization/workspaces.git
+  branch: main
+  access: ssh
+modelCatalog:
+  defaults:
+    session: deepseek/deepseek-v4-pro
+    metadataGeneration: openai/gpt-4.1-mini
+  embedding:
+    id: ollama/qwen3-embedding:0.6b
+    dimensions: 1024
+  providers:
+    deepseek:
+      authentication: {mode: pi_auth}
+      session: {mode: pi_builtin}
+      models:
+        deepseek-v4-pro:
+          session: {}
+    openai:
+      endpoint: {baseUrl: https://api.openai.example/v1}
+      authentication: {mode: secret_env, apiKeyEnv: OPENAI_API_KEY}
+      metadataGeneration: {litellmProvider: openai}
+      models:
+        gpt-4.1-mini:
+          label: OpenAI Mini
+          metadataGeneration: {}
+authentication:
+  # Root-operated source of truth; it is never mounted into core.
+  configDirectory: "/srv/example/thothii/auth-canonical"
+  runtimeProjection:
+    # The only authentication bind exposed to core by the automatic override.
+    directory: "/srv/example/thothii/auth-runtime"
+    uid: 10001
+    gid: 10001
+overrides:
+  - "/absolute/path/to/ThothII/deploy/compose.session-server.yaml.example"
+  - "/absolute/path/to/ThothII/deploy/compose.git-ssh.yaml"