Initial Commit

2026-09-15 15:24:03 -04:00
commit 4dc7086e7e
605 changed files with 101380 additions and 0 deletions
@@ -0,0 +1,46 @@
+# =====================================================================
+# The VM daemon's settings. Installed to /etc/owuivm/vmd.env by
+# vm/host/install.sh, and read by owuivmd.service.
+#
+# INSTALLED ONLY IF IT IS NOT ALREADY THERE. The live copy holds a Gitea
+# token, so re-running install.sh must never overwrite it. Change the
+# live file to change the running daemon; change this one to change what
+# a fresh install starts from.
+#
+# This file is TRACKED, so keep secrets out of it. The token line is
+# deliberately left empty here and filled in on the host.
+# =====================================================================
+
+# Where vmd reaches Gitea to push a finished project. The LAN address,
+# not the public name: this is a host-to-host call on the same network,
+# and owuivmd.service's address filter allows exactly this destination.
+OWUITOOLS_GITEA_URL=http://192.168.1.10:7200
+
+# What the user is given as a link. The public name, because the LAN
+# address is no use to anyone reading the chat.
+OWUITOOLS_GITEA_PUBLIC_URL=https://git.example.com
+
+# The organisation repositories are created under, and the bot account
+# that owns the commits.
+OWUITOOLS_GITEA_ORG=vmlab
+OWUITOOLS_GITEA_BOT=vmagent
+
+# A Gitea access token for that bot, with write access to the org.
+# WITHOUT IT a session still runs and still keeps its files - it just
+# publishes nothing and returns no link.
+#   Setup: docs/setup/gitea.md
+OWUITOOLS_GITEA_TOKEN=
+
+# The tool gateway, for the sub-agent's web_search and read_page. vmd
+# calls the same endpoints the assistant calls, so there is one search in
+# this house rather than two implementations of one. SearXNG itself is
+# unreachable from here and from the sandbox, deliberately: it lives in
+# netguard's network namespace behind a default-deny filter.
+#
+# The address is the gw container's pinned one from docker-compose.yml.
+OWUITOOLS_TOOLS_URL=http://172.22.0.10:8000
+
+# The same bearer token Open WebUI's tool connection uses -
+# OWUITOOLS_AUTH_TOKEN from configs/owuitools.env. Without it the
+# sub-agent simply has no lookup tools.
+OWUITOOLS_AUTH_TOKEN=