version: 1
kind: platform-infra-public-edge

metadata:
  id: public-edge
  owner: platform-infra
  relatedIssues:
    - 2181
    - 2274
    - 2358
    - 2541

defaults:
  targetId: NC01

delivery:
  enabled: true
  authorityId: public-edge-master
  sourceBranch: master
  pipelineId: platform-infra-gitea-nc01
  sourceCommitEnvironment: SOURCE_COMMIT
  transport:
    hostCwd: /root
    secretRef:
      configRef: config/secrets-distribution.yaml
      targetId: public-edge-delivery-nc01
      secretName: public-edge-trans
      targetKey: UNIDESK_SSH_CLIENT_TOKEN
  hostHelper:
    archiveRoot: /root/unidesk/.state/public-edge-delivery
    entrypoint: scripts/native/cicd/apply-platform-infra-public-edge-archive.mjs
    sourcePaths:
      - config
      - scripts
      - package.json
      - bun.lock

targets:
  NC01:
    route: NC01
    publicAddress: 152.53.229.148
    isolation:
      excludedRoutes:
        - PK01
      preservedUdpPorts:
        - 443
    listener:
      httpPort: 80
      httpsPort: 443
      protocols:
        - h1
        - h2
    runtime:
      image: caddy:2.10.2-alpine
      containerName: unidesk-public-edge
      workDir: /opt/unidesk/public-edge
      composePath: /opt/unidesk/public-edge/docker-compose.yaml
      caddyfilePath: /opt/unidesk/public-edge/Caddyfile
      dataDir: /var/lib/unidesk/pikaoa-edge/caddy-data
      configDir: /var/lib/unidesk/pikaoa-edge/caddy-config
      statePath: /var/lib/unidesk/public-edge/reconcile-state.json
      lockPath: /run/lock/unidesk-public-edge.lock
      legacy:
        containerName: pikaoa-edge
        composePath: /opt/unidesk/pikaoa-edge/docker-compose.yaml
        caddyfilePath: /opt/unidesk/pikaoa-edge/Caddyfile
      dnsServers:
        - 10.43.0.10
      responseHeaderTimeoutSeconds: 60
    sites:
      - id: pikaoa-development
        configRef: config/pikaoa.yaml
        path: developmentRuntime.targets.NC01
      - id: pikaoa-production
        configRef: config/pikaoa.yaml
        path: releaseRuntime.targets.NC01
      - id: vpn-subscription
        configRef: config/platform-infra/vpn-subscription.yaml
        path: targets.NC01.publicExposure
      - id: hwlab-development
        configRef: config/hwlab-node-control-plane.yaml
        path: publicExposures.NC01.v03
      - id: hwlab-workbench-native
        configRef: config/hwlab-node-lanes.yaml
        path: lanes.v03.targets.NC01.nativeDevelopment.workbench.publicExposure
      - id: hwlab-caserun-native
        configRef: config/hwlab-node-lanes.yaml
        path: lanes.v03.targets.NC01.nativeDevelopment.caserun.publicExposure
      - id: hwlab-production
        configRef: config/hwlab-node-control-plane.yaml
        path: publicExposures.NC01.production
      - id: hwpod-home
        configRef: config/platform-infra/hwpod-home.yaml
        path: targets[id=NC01].publicExposures.apex
      - id: hwpod-home-www
        configRef: config/platform-infra/hwpod-home.yaml
        path: targets[id=NC01].publicExposures.www
      - id: unidesk
        configRef: config/frontend.yaml
        path: publicExposure
      - id: webterm
        configRef: config/platform-infra/webterm.yaml
        path: targets[id=local-7683].publicExposure
      - id: webterm-7682
        configRef: config/platform-infra/webterm.yaml
        path: targets[id=local-7682].publicExposure
      - id: apistate
        configRef: config/platform-infra/sub2rank.yaml
        path: targets[id=NC01].publicEdge
      - id: selfmedia-development
        configRef: config/selfmedia.yaml
        path: delivery.targets.NC01.deployment.publicExposure.edge
      - id: selfmedia-production
        configRef: config/selfmedia.yaml
        path: delivery.targets.NC01_PRODUCTION.deployment.publicExposure.edge
      - id: temporal
        configRef: config/platform-infra/temporal.yaml
        path: publicExposure
      - id: findjob
        configRef: config/platform-infra/findjob.yaml
        path: publicExposure
      - id: superapi
        configRef: /root/superapi/config/superapi.yaml
        path: publicExposure
        sourceCommit: 2f68c9989f49601537780e8804d02b74600adf7d