agent-vault/fly.toml at main · Infisical/agent-vault · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
app = "agent-vault"
primary_region = "sjc"

[build]

[env]
  # Set AGENT_VAULT_ADDR via `fly secrets set` to your app's public URL.
  # Set AGENT_VAULT_MASTER_PASSWORD via `fly secrets set`.

[http_service]
  internal_port = 14321
  force_https = true
  auto_stop_machines = "stop"
  auto_start_machines = true
  min_machines_running = 0  # Set to 1 to avoid cold-start latency

# The MITM proxy on 14322 is reachable only via Fly's private networking
# (.internal DNS over IPv6). The CMD override below binds to :: so the
# proxy listens on both IPv4 and IPv6 (required for Fly's 6PN mesh).

[experimental]
  cmd = ["server", "--host", "::", "--port", "14321"]

[[vm]]
  size = "shared-cpu-1x"
  memory = "256mb"

[mounts]
  source = "agent_vault_data"
  destination = "/data"

[checks]
  [checks.health]
    type = "http"
    port = 14321
    path = "/health"
    interval = "30s"
    timeout = "5s"