spb/datacenterindex

1# DataCenterIndex — DATA node (BHS128) secrets & settings.2# Copy to deploy/.env.data (gitignored) and fill every empty value; deploy/bin/deploy.sh data copies it to3# BHS128:/srv/dci/app/deploy/.env.data (mode 600). Generate secrets with: openssl rand -hex 244# The crawl node must use the SAME POSTGRES/REDIS/CLICKHOUSE/S3 values (deploy/.env.crawl).56# ── network binds (do not change unless the WireGuard addressing changes)7DATA_WG_IP=10.67.0.60          # wg1 — the BHS64 gateway reaches edge :8300 here8DATA_PRIVATE_IP=10.68.0.1      # dci0 — stores/monitoring published here for the crawl node only9CRAWL_PRIVATE_IP=10.68.0.210TZ=America/Toronto1112# ── image tag / tsx version (TSX_VERSION is overridden from pnpm-lock.yaml by deploy/bin/lib.sh)13DCI_TAG=latest14TSX_VERSION=4.23.131516# ── Postgres (user dci, db dci)17POSTGRES_PASSWORD=18PG_POOL_MAX=161920# ── ClickHouse (users `default` = loopback only, `dci` = app; same password)21CLICKHOUSE_PASSWORD=22CLICKHOUSE_DB=dci2324# ── Redis (requirepass)25REDIS_PASSWORD=2627# ── MinIO: root credentials (console) + least-privilege app user created by minio-init28MINIO_ROOT_USER=dci-admin29MINIO_ROOT_PASSWORD=30S3_ACCESS_KEY=dci31S3_SECRET_KEY=32S3_BUCKET=dci-raw3334# ── application35DCI_ADMIN_TOKEN=36DCI_USER_AGENT="DataCenterIndexBot/0.1 (+https://www.datacenterindex.io/bot; contact@spboucher.ai)"37NEXT_PUBLIC_API_URL=https://www.datacenterindex.io38NEXT_PUBLIC_SITE_URL=https://www.datacenterindex.io39DCI_LOG_LEVEL=info40DCI_API_CACHE_ENTRIES=500041DCI_SCHEDULER_INTERVAL_MS=6000042DCI_MAINTENANCE_CONCURRENCY=243# premium fetchers are normally only used by the crawl node; keep empty here unless `cli` runs need them44SCRAPFLY_API_KEY=45FIRECRAWL_API_KEY=46DCI_SCRAPFLY_DAILY_BUDGET=40047DCI_FIRECRAWL_DAILY_BUDGET=2004849# ── Grafana (http://10.68.0.1:3000 via deploy/bin/tunnel-grafana.sh)50GRAFANA_ADMIN_USER=admin51GRAFANA_ADMIN_PASSWORD=52