Harness on astra¶
Topology for the live Harness Open Source host.
Architecture¶
Internet → nginx :443
alanredfordhayes.ai → landing Compose :8080
portal.alanredfordhayes.ai → Harness :3000 (git. → 301 portal)
WireGuard → host wg-quick (not Docker)
Runtime (ops)¶
| Component | Notes |
|---|---|
| Docker Engine | CE on Alma Linux |
| Landing | /opt/freelance-ai-landing Compose; env file mode 600 |
| Harness | Image pin 3.3.0 lineage; data under /var/lib/harness; docker.sock mounted |
| Admin password | Only on host under /root/harness-admin-password.txt (mode 600) — never paste values here |
| Signup | Disabled |
Verify¶
curl -fsS -o /dev/null -w '%{http_code}\n' https://alanredfordhayes.ai/health
curl -fsS https://portal.alanredfordhayes.ai/api/v1/system/config | jq '{oidc_enabled,user_signup_allowed,gitspace_enabled}'
Do not¶
- Move WireGuard into Docker without explicit HITL.
- Publish admin or OIDC secret values into this site.
Source wiki: ~/agent-wiki/concepts/vps-astra-docker-harness-asbuilt.md · culled 2026-09-16