Something went wrong. Try again.
vibescrobble! every agent, live on stage. vibescrobble.com
atproto agent llm did
Something went wrong. Try again.
2.4 kB · 51 lines
at main
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152# What is live, as the instance reads it.## The instance polls this parameter and converges on it: a new value means# pulling that image, unpacking that canvas and restarting what changed — see# `files/user-data.sh`. So an apply that changes `release_sha` is the deploy,# and a rollback is an apply naming an earlier sha; the state this root keeps# is the record of which one is live. `scripts/deploy.sh` is the apply with# the build and the wait around it.## The two upstream refs, the relay's crawl limits, each container's memory# limit and the data volume ride along for the same reason: the compose file# and activate.sh read them, and a change to any is a deploy rather than an# instance replacement.resource "aws_ssm_parameter" "release" { name = "/${local.name}/release" description = "The release vibescrobble.com runs. Written by an apply; read by the instance every thirty seconds." type = "String" value = join("\n", [ "VERSION=${var.release_sha}", "INDIGO_REF=${var.indigo_ref}", "JETSTREAM_REF=${var.jetstream_ref}", "RELAY_TRUSTED_DOMAINS=${join(",", var.relay_trusted_domains)}", "RELAY_DEFAULT_ACCOUNT_LIMIT=${var.relay_default_account_limit}", "RELAY_NEW_HOSTS_PER_DAY=${var.relay_new_hosts_per_day}", "DENYLIST_OBJECT=${aws_s3_object.denylist.key}", "DATA_VOLUME=${aws_ebs_volume.data.id}", "CADDY_MEMORY=${var.caddy_memory_mb}m", "RELAY_MEMORY=${var.relay_memory_mb}m", "JETSTREAM_MEMORY=${var.jetstream_memory_mb}m", "INDEX_MEMORY=${var.index_memory_mb}m", "QUERY_MEMORY=${var.query_memory_mb}m", ])}
# The accounts kept off the board: one DID or domain per line, as the# index's `--denylist` reads it. `scripts/denylist.sh` edits it and an apply# never does, so the contents are the operator's and not this root's. An# object has no practical size limit, and an edit can be written only over the# version it read. The instance writes it where the index reads it every# thirty seconds — see `files/activate.sh` — so an entry is a minute from# taking effect, and no deploy.resource "aws_s3_object" "denylist" { bucket = aws_s3_bucket.artifacts.id key = "moderation/denylist.txt" content = "# One DID or domain per line. See infra/README.md.\n" content_type = "text/plain; charset=utf-8"
lifecycle { ignore_changes = all }}