merge: SP25 + SP26 SFTP polling + secret-file lookup into Version-1.0.0

Bring the SP25 SFTP Polling Enablement (PATCH /api/clearhouse,
scheduler hot-reload, env-var-first secret lookup) and SP26
SFTP Password File Companion (Docker secret _FILE tier) onto
the v1.0.0 release branch so the production stack can actually
flip the Gainwell MFT poll from stub → real.

Conflict resolved in docker-compose.yml: kept both the SP26
CYCLONE_SFTP_PASSWORD_FILE env var and the new 'Always bind
to 0.0.0.0' comment.
This commit is contained in:
tyler
2026-06-24 18:09:32 -06:00
16 changed files with 3189 additions and 14 deletions
+5
View File
@@ -43,6 +43,8 @@ services:
# embedding the secret in the compose file.
CYCLONE_ADMIN_USERNAME_FILE: "/run/secrets/cyclone_admin_username"
CYCLONE_ADMIN_PASSWORD_FILE: "/run/secrets/cyclone_admin_password"
# SP26 — SFTP password via Docker secret (matches the admin-creds pattern).
CYCLONE_SFTP_PASSWORD_FILE: "/run/secrets/cyclone_sftp_password"
# Always bind to 0.0.0.0. The compose-managed bridge network
# isolates the backend from the host's LAN/WAN — only the
# `frontend` service joins it. Host firewall / port publishing
@@ -53,6 +55,7 @@ services:
- cyclone_db_key
- cyclone_admin_username
- cyclone_admin_password
- cyclone_sftp_password
volumes:
- cyclone_db:/var/lib/cyclone/db
- cyclone_backups:/var/lib/cyclone/backups
@@ -92,6 +95,8 @@ secrets:
file: /etc/cyclone/secrets/admin_username
cyclone_admin_password:
file: /etc/cyclone/secrets/admin_pw
cyclone_sftp_password:
file: /etc/cyclone/secrets/sftp_password
volumes:
cyclone_db: