r00tpig/verae-ops
Watch
1
0
Fork
You've already forked verae-ops
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: zappier-edge is now verae-edge-billing

Browse source 
The billing edge repo and ns1 service were renamed on 2026-10-06
(marchon/verae-edge-billing, verae-edge-billing.service, /opt/verae/verae-edge-billing).
Old Forgejo URLs redirect; the old unit name and path remain as aliases/symlinks.
This commit is contained in:
Scott "R00tPiG Security" Lindsey 2026-10-06 14:00:06 -04:00
commit ee0ff38e84
8 changed files with 29 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

10
01-dependencies.md
View file

@ -7,7 +7,7 @@ Humans / Zapier cloud
access-web :3021/portal access-zapier :3024 access-api :3022
│ │
▼ ▼
zappier-edge loopback :3000 (meter, admin, Stripe; not a public door)
verae-edge-billing loopback :3000 (meter, admin, Stripe; not a public door)
│ HTTPS internal
▼
middleware-http :3100 (/zapier/v1)
@ -29,7 +29,7 @@ Prefix `ssh://git@git.georgelambert.org:2223/marchon/<name>.git` (SSH **2223**).
| You need | Repo | Catalog README |
|----------|------|----------------|
| Billing HTTPS | `zappier-edge` | https://zapier.georgelambert.org/packages/zappier/README.pdf |
| Billing HTTPS | `verae-edge-billing` | https://zapier.georgelambert.org/packages/zappier/README.pdf |
| Zapier adapter | `verae-middleware` | https://zapier.georgelambert.org/packages/verae-zapier-middleware/README.pdf |
| Zapier app (cloud) | `verae-zapier-app` | https://zapier.georgelambert.org/packages/verae-zapier/README.pdf |
| WORM nodes | `verae-archive-worm` | https://zapier.georgelambert.org/packages/verae-archive-worm/README.pdf |
@ -59,18 +59,18 @@ Manifest: `host-deps.tsv`. Narrative: [HOST-DEPS.md](https://git.georgelambert.o
| Service | Needs |
|---------|--------|
| zappier-edge | Node 20+, **better-sqlite3** (python3/make/g++ on Linux), SQLite path, `PORT`, optional Stripe keys |
| verae-edge-billing | Node 20+, **better-sqlite3** (python3/make/g++ on Linux), SQLite path, `PORT`, optional Stripe keys |
| middleware | Node 22+, `NATS_URL` **or** `NATS_ENABLED=false`, chain URL or `MOCK_VERAE` |
| NATS | JetStream, **no public bind** (`host-deps.sh --nats` on archive / all-in-one) |
| worm / tree-node | Node, `NATS_URL`, local state dir |
| fleet | Node, `machines.json` (SSH **paths**), HTTP `:3850` on `0.0.0.0`, `openssh-client` |
| Zapier cloud app | `MIDDLEWARE_BASE_URL` = **public HTTPS of zappier-edge** (or middleware if you skip metering in lab) |
| Zapier cloud app | `MIDDLEWARE_BASE_URL` = **public HTTPS of verae-edge-billing** (or middleware if you skip metering in lab) |
## Ports (lab defaults)
| Port | Bind | Process |
|------|------|---------|
| 3000 | **loopback** (lab) | zappier-edge (admin); public portal is `:3021` |
| 3000 | **loopback** (lab) | verae-edge-billing (admin); public portal is `:3021` |
| 3021 | public | access-web `/portal/` |
| 3028 | private/LAN | staff IAM |
| 3100 | public or docker publish | middleware |

4
02-docker.md
View file

@ -3,7 +3,7 @@
`docker-compose.yml` in this repo starts:
- NATS JetStream **3-node cluster** (`nats1`–`nats3`) on an internal network
- **zappier-edge** `:3000`
- **verae-edge-billing** `:3000`
- **middleware** `:3100` with `NATS_URL=nats://nats1:4222` and `MOCK_VERAE=true` by default
- **archive-worm** ×3 and **tree-node** ×3 (fleet floors) as long-running Node workers
- **aggregator** + **job-poller** stand-ins via middleware workers when `NATS_ENABLED=true`
@ -25,7 +25,7 @@ Without `MONOREPO`, Compose expects `../zappier`, `../verae-zapier-middleware`,
## Link Zapier (cloud) to the lab
1. Publish zappier-edge on a TLS hostname (Caddy/nginx in front of `:3000`).
1. Publish verae-edge-billing on a TLS hostname (Caddy/nginx in front of `:3000`).
2. In the Zapier app env: `MIDDLEWARE_BASE_URL=https://<zappier-host>` (edge meters, then proxies).
3. Sign up on `/portal`, copy `x-api-key`.

2
03-proxmox.md
View file

@ -55,6 +55,6 @@ Loopback NATS on the host stays `127.0.0.1:4222` (current lab bus). `verae-nats-
## Edge / Caddy
Stay on the **host** (already live). Do not put zappier-edge in the worker CT.
Stay on the **host** (already live). Do not put verae-edge-billing in the worker CT.
Operator console: `https://fleet.zapier.georgelambert.org/` · overlay `packages/verae-fleet/overlays/ns1/`.

6
05-dedicated-hardware.md
View file

@ -6,9 +6,9 @@ NS1-style: a box that already runs NATS on **127.0.0.1:4222** (never a public bi
1. Node 22+, git (SSH port **2223** to Forgejo).
2. `nats-server -js` listening **127.0.0.1:4222** only (cluster later on a private NIC).
3. Clone `zappier-edge`, `verae-middleware`, `verae-fleet`.
3. Clone `verae-edge-billing`, `verae-middleware`, `verae-fleet`.
4. systemd units (below) or `verae-fleet serve` which keepFloor-spawns workers.
5. Caddy file `caddy/zapier-services.georgelambert.org.caddy` on NS1: `portal`/`zap`/`api`/staff/fleet hostnames → local ports. zappier-edge stays loopback (`:3000`, or `:13000` on NS1 if `:3000` is already taken).
5. Caddy file `caddy/zapier-services.georgelambert.org.caddy` on NS1: `portal`/`zap`/`api`/staff/fleet hostnames → local ports. verae-edge-billing stays loopback (`:3000`, or `:13000` on NS1 if `:3000` is already taken).
6. Operator console: `0.0.0.0:3850`. `verae-keep` (`:3860`) + `watch` (`:3861`) + `guard.sh` keep workers up unless you paused/stopped them in the console.
7. Clone/install: [verae-bootstrap](https://git.georgelambert.org/marchon/verae-bootstrap) type `ns1-all-in-one`.
@ -33,7 +33,7 @@ User=verae
WantedBy=multi-user.target
```
zappier-edge similar with `PORT=3000` and `WorkingDirectory` of that clone.
verae-edge-billing similar with `PORT=3000` and `WorkingDirectory` of that clone.
## Extra machines

8
06-linking-services.md
View file

@ -6,8 +6,8 @@ Every process learns peers from **environment variables** and **fleet service JS
| Process | Variable | Points at |
|---------|----------|-----------|
| Zapier cloud app | `MIDDLEWARE_BASE_URL` | Public **zappier-edge** HTTPS (prod) or middleware (lab) |
| zappier-edge | `ZAPPIER_UPSTREAM` or internal proxy target | middleware `:3100` |
| Zapier cloud app | `MIDDLEWARE_BASE_URL` | Public **verae-edge-billing** HTTPS (prod) or middleware (lab) |
| verae-edge-billing | `ZAPPIER_UPSTREAM` or internal proxy target | middleware `:3100` |
| middleware | `NATS_URL` | `nats://nats1:4222,nats://nats2:4222,nats://nats3:4222` |
| middleware | `VERAE_API_BASE_URL` | `https://api.veraetime.net` |
| middleware | `MOCK_VERAE` | `true` only in lab |
@ -23,7 +23,7 @@ curl -H "x-api-key: $KEY" https://zappier.example.com/v1/status
curl http://127.0.0.1:3100/health
```
If Zapier gets 401/402, fix keys and the rate card on zappier-edge — not NATS.
If Zapier gets 401/402, fix keys and the rate card on verae-edge-billing — not NATS.
## NATS hops (must stay private)
@ -47,7 +47,7 @@ https://zapier.georgelambert.org/docs/02-architecture/fleet.pdf
| archive-worm | 3 |
| tree-node | 3 |
| middleware-http | 1 |
| zappier-edge | 1 |
| verae-edge-billing | 1 |
| aggregator / poller / webhook | 1 |
Link a new host: operator console → Add machine → `ssh-check` → reconcile.

12
GETTING-STARTED.md
View file

@ -3,7 +3,7 @@
This is the **top document** for install, first-up, and monitoring. Platform-specific detail lives in the numbered ops chapters; do not start there.
**Catalog:** https://zapier.georgelambert.org/packages/verae-ops/GETTING-STARTED.pdf
**Billing / users (zappier-edge):** https://zapier.georgelambert.org/packages/zappier/docs/USER-MANUAL.pdf
**Billing / users (verae-edge-billing):** https://zapier.georgelambert.org/packages/zappier/docs/USER-MANUAL.pdf
**Operator console:** http://127.0.0.1:3850/ (loopback) · https://zapier.georgelambert.org/packages/verae-fleet/docs/CONSOLE.pdf
## What you are turning on
@ -13,7 +13,7 @@ This is the **top document** for install, first-up, and monitoring. Platform-spe
| **access-authz** | NATS authorization step for every access plane | `:3020` |
| **access-web / api / leaf / zapier / staff** | Public HTTP doors | `:3021–:3025` |
| **identity** | `veraeUserId` bind/lookup | `:3026` |
| **zappier-edge** | Identity cache, Stripe, admin (loopback only) | `127.0.0.1:3000` (lab; NS1 all-in-one uses `:13000` if `:3000` is taken) |
| **verae-edge-billing** | Identity cache, Stripe, admin (loopback only) | `127.0.0.1:3000` (lab; NS1 all-in-one uses `:13000` if `:3000` is taken) |
| **staff-iam** | Named staff users, roles, sessions | `:3028` |
| **staff-session** | Staff cookie (proxies IAM) | `:3027` |
| **verae-keep** | Restart crashed units unless admin paused/stopped | keep `:3860`, watch `:3861` |
@ -27,9 +27,9 @@ This is the **top document** for install, first-up, and monitoring. Platform-spe
| **worm ×3, tree-node ×3** | Off-chain files and Merkle leaves | fleet floor |
| **fleet** | Replica floors, SSH hosts, Trace, Docs | `:3850` on `0.0.0.0` |
Zapier cloud talks **only** to **access-zapier** (`:3024`) over HTTPS. Browsers use access-web. Customer API keys use access-api. Staff use access-staff. zappier-edge is loopback.
Zapier cloud talks **only** to **access-zapier** (`:3024`) over HTTPS. Browsers use access-web. Customer API keys use access-api. Staff use access-staff. verae-edge-billing is loopback.
The billing and user platform is the standalone **zappier** project (`/Users/marchon/zappier`, Forgejo [zappier-edge](https://git.georgelambert.org/marchon/zappier-edge)): portal signup, TOTP, API keys, rate card, Stripe meter, PO invoices, admin users. Verae middleware does **not** replace it.
The billing and user platform is the standalone **zappier** project (`/Users/marchon/zappier`, Forgejo [verae-edge-billing](https://git.georgelambert.org/marchon/verae-edge-billing)): portal signup, TOTP, API keys, rate card, Stripe meter, PO invoices, admin users. Verae middleware does **not** replace it.
## 15-minute lab (one machine)
@ -58,7 +58,7 @@ docker compose up --build
Check:
```bash
curl -fsS http://127.0.0.1:3000/health # zappier-edge (billing + users)
curl -fsS http://127.0.0.1:3000/health # verae-edge-billing (billing + users)
curl -fsS http://127.0.0.1:3010/health # account-balance (NATS SoT)
curl -fsS http://127.0.0.1:3011/health # customer-service
curl -fsS http://127.0.0.1:3012/health # sales-pricing
@ -127,5 +127,5 @@ node src/cli.js ssh-check ns1
## If something is red
1. Fleet row color: yellow = paused/degraded, red = below floor — `restart` that replica.
2. 401/402 from Zapier → zappier-edge keys and rate card, not NATS.
2. 401/402 from Zapier → verae-edge-billing keys and rate card, not NATS.
3. Archive lookup empty → bloom miss is **silence**; check worm/tree floors, not “error replies”.

2
README.md
View file

@ -26,7 +26,7 @@ Public PDFs of the same files: `https://zapier.georgelambert.org/packages/verae-
| Rule | Why |
|------|-----|
| Zapier cloud → **HTTPS only** (zappier-edge) | Never NATS, never `api.veraetime.net` |
| Zapier cloud → **HTTPS only** (verae-edge-billing) | Never NATS, never `api.veraetime.net` |
| NATS binds **loopback or a private docker/VM net** | Not on the public NIC |
| Tree-node **min 3**, pause does not count | Bulk Merkle lookups |
| Private keys stay on disk; git stores **paths** | `machines.json` `identityFile` |

14
docker-compose.yml
View file

@ -42,7 +42,7 @@ services:
networks: [verae]
restart: unless-stopped
zappier-edge:
verae-edge-billing:
<<: *node
build:
context: ${MONOREPO:-..}/packages/zappier
@ -158,13 +158,13 @@ services:
command: ["node", "src/server.js"]
environment:
PORT: "3011"
ZAPPIER_ADMIN_URL: http://zappier-edge:3000
ZAPPIER_ADMIN_URL: http://verae-edge-billing:3000
ACCOUNT_BALANCE_URL: http://account-balance:3010
NATS_URL: nats://nats1:4222
AUTHZ_URL: http://access-authz:3020
ports:
- "3011:3011"
depends_on: [zappier-edge, account-balance, nats1]
depends_on: [verae-edge-billing, account-balance, nats1]
sales-pricing:
<<: *node
@ -175,12 +175,12 @@ services:
command: ["node", "src/server.js"]
environment:
PORT: "3012"
ZAPPIER_ADMIN_URL: http://zappier-edge:3000
ZAPPIER_ADMIN_URL: http://verae-edge-billing:3000
ACCOUNT_BALANCE_URL: http://account-balance:3010
NATS_URL: nats://nats1:4222
ports:
- "3012:3012"
depends_on: [zappier-edge, account-balance, nats1]
depends_on: [verae-edge-billing, account-balance, nats1]
accounting-export:
<<: *node
@ -191,12 +191,12 @@ services:
command: ["node", "src/server.js"]
environment:
PORT: "3013"
ZAPPIER_ADMIN_URL: http://zappier-edge:3000
ZAPPIER_ADMIN_URL: http://verae-edge-billing:3000
ACCOUNT_BALANCE_URL: http://account-balance:3010
NATS_URL: nats://nats1:4222
ports:
- "3013:3013"
depends_on: [zappier-edge, account-balance, nats1]
depends_on: [verae-edge-billing, account-balance, nats1]
middleware:
<<: *node