Skip to content

Document JQ_REPOS in the server setup, which silently shrinks the fleet #8

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tschm merged 1 commit into from
Aug 29, 2026
Merged

Document JQ_REPOS in the server setup, which silently shrinks the fleet #8

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 19 additions & 6 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -324,16 +324,29 @@ A €4/month Hetzner CX22, a DigitalOcean droplet or a Lightsail instance are al
comfortably big enough; the whole stack idles under 500 MB.

```bash
# on the server, as a non-root user in the docker group
git clone https://github.com/Jebel-Quant/monitoring.git && cd monitoring

export GITHUB_TOKEN=github_pat_... # public_repo scope is enough
export GF_ADMIN_PASSWORD="$(openssl rand -base64 24)" # keep this somewhere
docker compose -f docker-compose.server.yml up -d

./scripts/check-public-safe.sh # must pass before sharing anything
cat > .env <<'SETTINGS'
GITHUB_TOKEN=github_pat_... # public_repo scope is enough
GF_ADMIN_PASSWORD=... # 16+ chars; openssl rand -base64 24
FLEET_DOMAIN=fleet.example.com
ACME_EMAIL=you@example.com
# Repos outside the swept org. Leave this out and they are silently absent -
# the board simply reports a smaller fleet, with nothing to say it is short.
JQ_REPOS=cvxgrp/cvxrisk,cvxgrp/simulator,cvxgrp/cvxcla,cvxgrp/cvxmarkowitz
SETTINGS
chmod 600 .env

./scripts/bootstrap-server.sh # checks everything, then starts the stack
```

A `.env` rather than `export`, so the settings survive a reboot - compose reads
it automatically, and it is gitignored.

Note the token has to be able to read every repo named in `JQ_REPOS`. A
fine-grained token scoped to one org cannot see another's, and the collector
logs `named repo ... is not readable` when that happens.

Then reach Grafana, sign in as `admin`, open **Jebel-Quant Fleet (public)** →
*Share* → *Public dashboard*, and share only that link.

Expand Down
Loading