CIS490/etc
elliott d294eb9f52 fix: orchestrator never received MSFRPC_PASSWORD — load msfrpc.env
The cis490-orchestrator unit only loaded lab-host.env, which has no
MSFRPC_PASSWORD. run_tier3_demo.py exits rc=2 immediately if the var
is unset. All tier3 slots were failing in ~240ms.

Add EnvironmentFile=-/etc/cis490/msfrpc.env (the '-' prefix silences
the error on Tier-2-only hosts where the file doesn't exist yet).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-01 14:43:40 -06:00
..
caddy-root.crt bootstrap: auto-issue mTLS leaves to enrolled lab hosts (closes #9, refs #3) 2026-04-30 01:30:29 -05:00
cis490-bootstrap.service Tier-4 sample source: theZoo (no auth, no operator action) 2026-05-01 01:17:50 -05:00
cis490-orchestrator.service fix: orchestrator never received MSFRPC_PASSWORD — load msfrpc.env 2026-05-01 14:43:40 -06:00
cis490-receiver.service Add receiver: PUT /v1/episodes ingest with sha256 verify and idempotency 2026-04-28 23:34:04 -06:00
cis490-shipper.service Lab-host shipper + receiver /v1/ping + install scripts 2026-04-29 23:41:32 -05:00
lab-host.toml.example etc/lab-host.toml.example: pin Caddy root, not wg-pki client CA (closes #14) 2026-04-30 17:26:36 -05:00
README.md Add receiver: PUT /v1/episodes ingest with sha256 verify and idempotency 2026-04-28 23:34:04 -06:00
receiver.toml.example version_gate: Forgejo as canonical commit source (no fs perms needed) 2026-05-01 01:42:45 -05:00

etc/

Templates for system-level files installed by scripts/install-*.sh:

  • cis490-receiver.service — systemd unit for the receiver
  • receiver.toml.example — config template for the receiver
  • cis490-orchestrator.service (TODO) — systemd unit for the orchestrator
  • cis490-shipper.service (TODO) — systemd unit for the shipper
  • lab-host.toml.example (TODO) — config template for the lab host

See docs/deploy.md for the install flow.