Ops/dev2 fleet kit

dev2/sites.d/advis0r.com.json

@@ -0,0 +1 @@
+{ "branch": "main", "env_remove": ["DATABASE_AUTH_TOKEN"] }

dev2/sites.d/aiornot.vote.json

@@ -0,0 +1 @@
+{ "branch": "master", "env_remove": ["TURSO_DATABASE_URL", "TURSO_AUTH_TOKEN"] }

dev2/sites.d/app.logicsrc.com.json

@@ -0,0 +1,6 @@
+{
+ "start_command": "npm --workspace @logicsrc/pwa run start",
+ "health_path": "/healthz",
+ "env_remove": ["TURSO_DATABASE_URL", "TURSO_AUTH_TOKEN"],
+ "notes": "The service is apps/pwa (Railway rootDirectory); the root .nixpacks CMD starts the Next marketing site instead, so the compose command overrides it. Turso -> shared Postgres 2026-09-25 (profullstack/logicsrc#218)."
+}

dev2/sites.d/app.moshcode.sh.json

@@ -1 +1,5 @@
-{"start_command": "node apps/pwa/src/server.mjs", "health_path": "/healthz", "notes": "Railway ran this service from apps/pwa (its railway.json: npm start -> node src/server.mjs, /healthz); the repo root start is the moshcode CLI"}
+{
+ "health_path": "/healthz",
+ "env_remove": ["DATABASE_AUTH_TOKEN"],
+ "notes": "web app is apps/pwa (own deps); plain Dockerfile on main, health /healthz. Turso -> shared Postgres 2026-09-25 (moshcoder/moshcode#551): DATABASE_URL is rewritten to the cluster URL by provision, the Turso token retired"
+}

dev2/sites.d/b1dz.com.json

@@ -0,0 +1,15 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.b1dz.com",
+   "port": 8240,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY": "secret:NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY",
+  "SUPABASE_SECRET_KEY": "secret:SUPABASE_SECRET_KEY",
+  "NEXT_PUBLIC_SUPABASE_URL": "https://supabase.b1dz.com",
+  "SUPABASE_DB_PASSWORD": "secret:SUPABASE_DB_PASSWORD"
+ }
+}

dev2/sites.d/bittorrented.com.json

@@ -0,0 +1,33 @@
+{
+ "site": "bittorrented.com",
+ "service": "bittorrented.com",
+ "repo": "profullstack/media-streamer",
+ "image": null,
+ "domains": [
+  "bittorrented.com",
+  "www.bittorrented.com"
+ ],
+ "db": "supabase",
+ "db_kinds": [
+  "supabase"
+ ],
+ "redis": false,
+ "volumes": [],
+ "companions": [],
+ "infra": [],
+ "project": null,
+ "project_id": null,
+ "environment_id": null,
+ "service_id": null,
+ "port": 3290,
+ "cloud_ref": "ussbjnpovrynxyztjeeb",
+ "app_host": "do (DigitalOcean droplet 137.184.114.110, user ubuntu, systemd bittorrented.service); NOT on dev2",
+ "notes": "Not a Railway site: only the Supabase stack lives on dev2 (supabase.bittorrented.com). DNS at DigitalOcean, so the cert is HTTP-01. The app, its workers and bitmagnet run on the droplet and were re-pointed by hand; never provision/deploy/dns/cutover this site with the kit.",
+ "proxies": [
+  {
+   "host": "supabase.bittorrented.com",
+   "port": 8290,
+   "max_body": "512m"
+  }
+ ]
+}

dev2/sites.d/bl0ggers.com.json

@@ -0,0 +1,17 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.bl0ggers.com",
+   "port": 8257,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "NEXT_PUBLIC_SUPABASE_ANON_KEY": "secret:NEXT_PUBLIC_SUPABASE_ANON_KEY",
+  "SUPABASE_ANON_KEY": "secret:SUPABASE_ANON_KEY",
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY",
+  "NEXT_PUBLIC_SUPABASE_URL": "https://supabase.bl0ggers.com",
+  "SUPABASE_DB_PASSWORD": "secret:SUPABASE_DB_PASSWORD",
+  "SUPABASE_URL": "https://supabase.bl0ggers.com"
+ }
+}

dev2/sites.d/brisk.news.json

@@ -5,5 +5,10 @@
    "port": 8238,
    "max_body": "512m"
   }
- ]
+ ],
+ "env_overrides": {
+  "NEXT_PUBLIC_SUPABASE_ANON_KEY": "secret:NEXT_PUBLIC_SUPABASE_ANON_KEY",
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY",
+  "NEXT_PUBLIC_SUPABASE_URL": "https://supabase.brisk.news"
+ }
 }

dev2/sites.d/bufferoverride.com.json

@@ -0,0 +1 @@
+{ "branch": "main", "env_remove": ["TURSO_DATABASE_URL", "TURSO_AUTH_TOKEN"] }

dev2/sites.d/c0upons.com.json

@@ -0,0 +1 @@
+{ "branch": "master", "env_remove": ["TURSO_DATABASE_URL", "TURSO_AUTH_TOKEN", "SQLITECLOUD_URL"] }

dev2/sites.d/coinpayportal.com.json

@@ -1 +1,30 @@
-{ "health_path": "/api/health" }
+{
+ "health_path": "/api/health",
+ "proxies": [
+  {
+   "host": "supabase.coinpayportal.com",
+   "port": 8273,
+   "max_body": "512m"
+  }
+ ],
+ "crons": [
+  {
+   "schedule": "* * * * *",
+   "path": "/api/cron/monitor-payments",
+   "auth_env": "CRON_SECRET",
+   "timeout": 55
+  }
+ ],
+ "notes": "Payment/escrow/lightning monitor ran as a Vercel cron every minute (vercel.json); on dev2 it is the cron.d entry rendered from `crons`.",
+ "env_overrides": {
+  "JWT_SECRET": "secret:JWT_SECRET",
+  "NEXT_PUBLIC_SUPABASE_ANON_KEY": "secret:NEXT_PUBLIC_SUPABASE_ANON_KEY",
+  "NEXT_PUBLIC_SUPABASE_URL": "https://supabase.coinpayportal.com",
+  "SUPABASE_DB_PASSWORD": "secret:SUPABASE_DB_PASSWORD",
+  "SUPABASE_JWT_SECRET": "secret:SUPABASE_JWT_SECRET",
+  "SUPABASE_PUBLISHABLE_KEY": "secret:SUPABASE_PUBLISHABLE_KEY",
+  "SUPABASE_SECRETMAT_KEY": "secret:SUPABASE_SECRETMAT_KEY",
+  "SUPABASE_SECRET_KEY": "secret:SUPABASE_SECRET_KEY",
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY"
+ }
+}

dev2/sites.d/communitygardensasappleseeds.info.json

@@ -0,0 +1,4 @@
+{
+ "health_path": "/",
+ "notes": "2026-09-25: was `skip` (stay on Railway, DNS at Cloudflare); Anthony reversed that the same day (\"move it all off railway\"). Zone is at Cloudflare (kobe/maxine), no Cloudflare token in the vault: the `dns` step cannot flip it and Porkbun DNS-01 cannot issue, so the cert is HTTP-01 (`cert` falls back to cmd_cert_http) AFTER the apex and www A records point at dev2 unproxied. Stateless Next site: no database; the Railway volume at /data/db is copied but nothing in the repo reads it."
+}

dev2/sites.d/d0rz.com.json

@@ -0,0 +1,15 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.d0rz.com",
+   "port": 8228,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "NEXT_PUBLIC_SUPABASE_ANON_KEY": "secret:NEXT_PUBLIC_SUPABASE_ANON_KEY",
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY",
+  "NEXT_PUBLIC_SUPABASE_URL": "https://supabase.d0rz.com",
+  "SUPABASE_URL": "https://supabase.d0rz.com"
+ }
+}

dev2/sites.d/feedback.profullstack.com.json

@@ -0,0 +1,5 @@
+{
+ "branch": "master",
+ "env_remove": ["TURSO_DATABASE_URL", "TURSO_AUTH_TOKEN"],
+ "db_sslparams": "sslmode=require"
+}

dev2/sites.d/goingbroke.now.json

@@ -0,0 +1,5 @@
+{
+ "branch": "master",
+ "env_remove": ["TURSO_DATABASE_URL", "TURSO_AUTH_TOKEN", "DATA_DIR"],
+ "db_sslparams": "sslmode=require"
+}

dev2/sites.d/hqtui.com.json

@@ -0,0 +1 @@
+{ "branch": "main", "env_remove": ["TURSO_DATABASE_URL", "TURSO_AUTH_TOKEN"] }

dev2/sites.d/icemap.app.json

@@ -0,0 +1,16 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.icemap.app",
+   "port": 8262,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY",
+  "SUPABASE_URL": "https://supabase.icemap.app"
+ },
+ "extensions": [
+  "postgis"
+ ]
+}

dev2/sites.d/infernetprotocol.com.json

@@ -0,0 +1,16 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.infernetprotocol.com",
+   "port": 8227,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "NEXT_PUBLIC_SUPABASE_ANON_KEY": "secret:NEXT_PUBLIC_SUPABASE_ANON_KEY",
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY",
+  "DATABASE_URL": "secret:DATABASE_URL",
+  "NEXT_PUBLIC_SUPABASE_URL": "https://supabase.infernetprotocol.com",
+  "SUPABASE_URL": "https://supabase.infernetprotocol.com"
+ }
+}

dev2/sites.d/installer.pairux.com.json

@@ -0,0 +1,8 @@
+{
+ "env_overrides": {
+  "NEXT_PUBLIC_SUPABASE_ANON_KEY": "secret:NEXT_PUBLIC_SUPABASE_ANON_KEY",
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY",
+  "NEXT_PUBLIC_SUPABASE_URL": "https://supabase.pairux.com",
+  "SUPABASE_DB_PASSWORD": "secret:SUPABASE_DB_PASSWORD"
+ }
+}

dev2/sites.d/logicsrc.com.json

@@ -0,0 +1,16 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.logicsrc.com",
+   "port": 8272,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "SUPABASE_ANON_KEY": "secret:SUPABASE_ANON_KEY",
+  "SUPABASE_PUBLISHABLE_KEY": "secret:SUPABASE_PUBLISHABLE_KEY",
+  "SUPABASE_SECRET_KEY": "secret:SUPABASE_SECRET_KEY",
+  "SUPABASE_DB_PASSWORD": "secret:SUPABASE_DB_PASSWORD",
+  "SUPABASE_URL": "https://supabase.logicsrc.com"
+ }
+}

dev2/sites.d/marksyncr.com.json

@@ -0,0 +1,15 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.marksyncr.com",
+   "port": 8260,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "NEXT_PUBLIC_SUPABASE_ANON_KEY": "secret:NEXT_PUBLIC_SUPABASE_ANON_KEY",
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY",
+  "NEXT_PUBLIC_SUPABASE_URL": "https://supabase.marksyncr.com",
+  "SUPABASE_JWT_SECRET": "secret:SUPABASE_JWT_SECRET"
+ }
+}

dev2/sites.d/meshhook.com.json

@@ -1 +1,9 @@
-{"node_version": "24", "notes": "pnpm in the lockfile needs Node >= 22.13; nixpacks pinned nixpkgs has 22.11"}
+{
+ "node_version": "24",
+ "notes": "pnpm in the lockfile needs Node >= 22.13; nixpacks pinned nixpkgs has 22.11",
+ "branch": "master",
+ "env_remove": [
+  "TURSO_DATABASE_URL",
+  "TURSO_AUTH_TOKEN"
+ ]
+}

dev2/sites.d/moshcoding.com.json

@@ -0,0 +1 @@
+{ "branch": "master", "env_remove": ["TURSO_DATABASE_URL", "TURSO_AUTH_TOKEN"] }

dev2/sites.d/opensourcelegends.com.json

@@ -0,0 +1,5 @@
+{
+ "branch": "master",
+ "env_remove": ["TURSO_DATABASE_URL", "TURSO_AUTH_TOKEN"],
+ "db_sslparams": "sslmode=require"
+}

dev2/sites.d/outreachgraph.com.json

@@ -0,0 +1 @@
+{ "env_remove": ["TURSO_AUTH_TOKEN"], "notes": "Turso -> shared Postgres 2026-09-25 (profullstack/outreachgraph#99); TURSO_DATABASE_URL is rewritten to the cluster URL by provision (the app reads DATABASE_URL first, that name as a fallback)" }

dev2/sites.d/p0dcasters.com.json

@@ -0,0 +1 @@
+{ "branch": "master", "env_remove": ["TURSO_DATABASE_URL", "TURSO_AUTH_TOKEN"], "notes": "Turso -> shared Postgres 2026-09-25 (profullstack/p0dcasters#29); next build runs at container start against DATABASE_URL" }

dev2/sites.d/pairux.com.json

@@ -0,0 +1,19 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.pairux.com",
+   "port": 8274,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "NEXT_PUBLIC_SUPABASE_ANON_KEY": "secret:NEXT_PUBLIC_SUPABASE_ANON_KEY",
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY",
+  "SUPABASE_S3_ACCESS_KEY": "secret:SUPABASE_S3_ACCESS_KEY",
+  "SUPABASE_S3_SECRET_KEY": "secret:SUPABASE_S3_SECRET_KEY",
+  "SUPABASE_S3_ENDPOINT": "https://supabase.pairux.com/storage/v1/s3",
+  "SUPABASE_S3_REGION": "stub",
+  "NEXT_PUBLIC_SUPABASE_URL": "https://supabase.pairux.com",
+  "SUPABASE_DB_PASSWORD": "secret:SUPABASE_DB_PASSWORD"
+ }
+}

dev2/sites.d/phonenumbers.bot.json

@@ -0,0 +1,15 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.phonenumbers.bot",
+   "port": 8268,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "SUPABASE_SECRET_KEY": "secret:SUPABASE_SECRET_KEY",
+  "SUPABASE_URL": "https://supabase.phonenumbers.bot",
+  "SUPABAsE_URL": "https://supabase.phonenumbers.bot",
+  "SUPABASE_DB_PASSWORD": "secret:SUPABASE_DB_PASSWORD"
+ }
+}

dev2/sites.d/postammo.com.json

@@ -0,0 +1,15 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.postammo.com",
+   "port": 8246,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY",
+  "SUPABASE_DB_PASSWORD": "secret:SUPABASE_DB_PASSWORD",
+  "SUPABASE_URL": "https://supabase.postammo.com",
+  "SUPABASE_JWT_JWKS_URL": "https://supabase.postammo.com/auth/v1/.well-known/jwks.json"
+ }
+}

dev2/sites.d/qaaas.dev.json

@@ -0,0 +1,17 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.qaaas.dev",
+   "port": 8266,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "NEXT_PUBLIC_SUPABASE_ANON_KEY": "secret:NEXT_PUBLIC_SUPABASE_ANON_KEY",
+  "SUPABASE_ANON_KEY": "secret:SUPABASE_ANON_KEY",
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY",
+  "SUPABASE_DB_PASSWORD": "secret:SUPABASE_DB_PASSWORD",
+  "SUPABASE_URL": "https://supabase.qaaas.dev",
+  "NEXT_PUBLIC_SUPABASE_URL": "https://supabase.qaaas.dev"
+ }
+}

dev2/sites.d/qrypt.chat.json

@@ -0,0 +1,18 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.qrypt.chat",
+   "port": 8239,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "PUBLIC_SUPABASE_URL": "https://supabase.qrypt.chat",
+  "PUBLIC_SUPABASE_ANON_KEY": "secret:PUBLIC_SUPABASE_ANON_KEY",
+  "SUPABASE_DB_PASSWORD": "secret:SUPABASE_DB_PASSWORD",
+  "SUPABASE_JWT_DISCOVERY_URL": "https://supabase.qrypt.chat/auth/v1/.well-known/jwks.json",
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY",
+  "NEXT_PUBLIC_SUPABASE_ANON_KEY": "secret:NEXT_PUBLIC_SUPABASE_ANON_KEY",
+  "NEXT_PUBLIC_SUPABASE_URL": "https://supabase.qrypt.chat"
+ }
+}

dev2/sites.d/reeleel.com.json

@@ -0,0 +1 @@
+{ "branch": "master", "env_remove": ["REELEEL_DB_URL", "REELEEL_DB_AUTH_TOKEN", "REELEEL_DB_REPLICA_PATH", "REELEEL_DB_SYNC_INTERVAL"] }

dev2/sites.d/saasrow.com.json

@@ -0,0 +1,22 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.saasrow.com",
+   "port": 8276,
+   "max_body": "512m"
+  }
+ ],
+ "function_secrets": {
+  "VITE_SUPABASE_URL": "https://supabase.saasrow.com",
+  "VITE_SUPABASE_ANON_KEY": "secret:VITE_SUPABASE_ANON_KEY",
+  "OPENAI_API_KEY": "secret:OPENAI_API_KEY",
+  "STRIPE_SECRET_KEY": "secret:STRIPE_SECRET_KEY",
+  "STRIPE_WEBHOOK_SECRET": "secret:STRIPE_WEBHOOK_SECRET",
+  "SITE_URL": "secret:SITE_URL",
+  "ADMIN_EMAIL": "secret:ADMIN_EMAIL",
+  "GETSCREENSHOT_API_KEY": "secret:GETSCREENSHOT_API_KEY",
+  "RESEND_API_KEY": "secret:RESEND_API_KEY",
+  "RESEND_DOMAIN": "secret:RESEND_DOMAIN",
+  "GEMINI_API_KEY": "secret:GEMINI_API_KEY"
+ }
+}

dev2/sites.d/sh1pt.com.json

@@ -0,0 +1,14 @@
+{
+ "proxies": [
+  {
+   "host": "supabase.sh1pt.com",
+   "port": 8244,
+   "max_body": "512m"
+  }
+ ],
+ "env_overrides": {
+  "NEXT_PUBLIC_SUPABASE_ANON_KEY": "secret:NEXT_PUBLIC_SUPABASE_ANON_KEY",
+  "SUPABASE_SERVICE_ROLE_KEY": "secret:SUPABASE_SERVICE_ROLE_KEY",
+  "NEXT_PUBLIC_SUPABASE_URL": "https://supabase.sh1pt.com"
+ }
+}