0c9bea72e0
Two groups of changes, committed together as the follow-up to the initial push: 1. .gitmodules — submodule Qwen3-TTS now points at the internal Gitea fork (ssh://git@mini-eq:2222/umbragit/Qwen3-TTS.git) instead of upstream GitHub, so a clone actually gets the UmbraAudio branding/integration commit 012e452 rather than vanilla upstream. 2. New infra/ tooling for the cross-machine work in spec 21: agent_bridge, remote_credential_broker (Keychain-backed, secrets read at runtime and generated via read_secret/random_secret — no hardcoded credentials), the enterprise bootstrap scripts, and the oldbox SSH/auth prompts. Plus backup/ restore scripts, two specs (18 UmbraTrans, 19 enterprise control plane), umbraaudio/voices/lmstudio_gate.py, and in-flight edits to the discovery/attribution/profiling modules, config, chapter_builder, emotion, pronunciation, qwen_tts and routes. Also adds *.db to .gitignore: SQLite project databases are runtime state and no .db file was tracked before. Verified before staging: .env's only change is UMBRA_TTS__QWEN_TTS_HELPER_URL and the committed copy has zero secret-looking values; the broker ships only config.example.json.
27 lines
761 B
JSON
27 lines
761 B
JSON
{
|
|
"profiles": {
|
|
"oldbox-umbra": {
|
|
"host": "oldbox.bdmurphy.me",
|
|
"username": "umbra",
|
|
"port": 22,
|
|
"ssh_credential": "oldbox-umbra-ssh",
|
|
"sudo_credential": "oldbox-umbra-sudo",
|
|
"known_hosts": "~/.ssh/known_hosts",
|
|
"allowed_sudo_commands": [
|
|
[
|
|
"/home/umbra/umbra-enterprise-bootstrap/bootstrap_umbracontrol_database.sh",
|
|
"--apply",
|
|
"--config",
|
|
"/home/umbra/umbra-enterprise-bootstrap/enterprise-bootstrap.env"
|
|
],
|
|
[
|
|
"/home/umbra/umbra-enterprise-bootstrap/bootstrap_umbracontrol_database.sh",
|
|
"--verify",
|
|
"--config",
|
|
"/home/umbra/umbra-enterprise-bootstrap/enterprise-bootstrap.env"
|
|
]
|
|
]
|
|
}
|
|
}
|
|
}
|