initial: unraid-1 bootstrap (garage + basement + watchtower + host-agent)

unraid-1/garage.toml

@@ -0,0 +1,35 @@
+# Garage v1 single-node config. Lives on unraid-1.
+# Secrets (rpc_secret, admin_token, metrics_token) come from env vars
+# defined in .env — NOT in this file. See Garage docs:
+# https://garagehq.deuxfleurs.fr/documentation/reference-manual/configuration/
+
+metadata_dir = "/var/lib/garage/meta"
+data_dir = "/var/lib/garage/data"
+
+# lmdb is the v1 default; sled was deprecated. lmdb is more crash-resilient
+# and the recommended engine for new deployments.
+db_engine = "lmdb"
+
+# Single-node: every object stored once. No HA.
+replication_factor = 1
+
+rpc_bind_addr = "[::]:3901"
+rpc_public_addr = "127.0.0.1:3901"
+# rpc_secret -> GARAGE_RPC_SECRET (env)
+
+[s3_api]
+s3_region = "garage"
+api_bind_addr = "[::]:3900"
+# Path-style: https://s3.pq.io/<bucket>/<key>
+# Virtual-host style: https://<bucket>.s3.pq.io/<key>  (requires DNS wildcard)
+root_domain = ".s3.pq.io"
+
+[s3_web]
+bind_addr = "[::]:3902"
+root_domain = ".web.s3.pq.io"
+index = "index.html"
+
+[admin]
+api_bind_addr = "[::]:3903"
+# admin_token   -> GARAGE_ADMIN_TOKEN (env)
+# metrics_token -> GARAGE_METRICS_TOKEN (env) — used by Prometheus scrape