dev_arc_aws/backend/.env.example

PORT=4000
ARCHNEST_DB_PATH=./data/archnest.db
ARCHNEST_JWT_SECRET=change-me-to-a-long-random-string
ARCHNEST_SECRET_KEY=change-me-to-another-long-random-string
ARCHNEST_CORS_ORIGIN=http://localhost:5173
ARCHNEST_GUAC_CRYPT_KEY=change-me-to-a-32-byte-secret!!
# Where guacd is reachable. In docker-compose this is the "guacd" service name;
# for local dev run guacd separately and point these at it (default 127.0.0.1:4822).
ARCHNEST_GUACD_HOST=127.0.0.1
ARCHNEST_GUACD_PORT=4822
Add backend skeleton: Fastify + SQLite API with auth and integrations - Single-user JWT auth with a first-run /api/setup endpoint, gated by GET /api/system/setup-status, to back an upcoming enrollment page - SQLite schema for users, integrations, secrets (AES-256-GCM encrypted), bookmarks, and bookmark categories - Integration adapter registry with real health-check adapters for Uptime Kuma and Docker, stubs for the rest, wired to POST /api/integrations/:id/test - CRUD routes for integrations and bookmarks - backend/ as its own Docker service in docker-compose.yml, Vite dev proxy for /api, .env.example for required secrets Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BbJV5nm8KPVH1oNJYKpnoF 2026-06-18 19:04:48 +00:00			`PORT=4000`
			`ARCHNEST_DB_PATH=./data/archnest.db`
			`ARCHNEST_JWT_SECRET=change-me-to-a-long-random-string`
			`ARCHNEST_SECRET_KEY=change-me-to-another-long-random-string`
			`ARCHNEST_CORS_ORIGIN=http://localhost:5173`
Phase 5: RDP/VNC/Telnet remote desktop via guacamole-lite + guacd Adds a remote_desktop integration type and a /api/guacamole websocket route that drives guacamole-lite's ClientConnection directly (bypassing its Server class, which would otherwise attach an unfiltered upgrade listener that conflicts with the existing @fastify/websocket routes). The frontend RemoteDesktop page renders the Guacamole protocol stream via guacamole-common-js. Verified end-to-end against a real guacd and VNC server, including in an actual browser session. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BbJV5nm8KPVH1oNJYKpnoF 2026-06-19 15:25:10 +00:00			`ARCHNEST_GUAC_CRYPT_KEY=change-me-to-a-32-byte-secret!!`
Wire guacd sidecar into docker-compose for Remote Desktop deployment Adds a guacamole/guacd service to docker-compose.yml and points the backend at it (ARCHNEST_GUACD_HOST/PORT) plus passes through ARCHNEST_GUAC_CRYPT_KEY, with depends_on ordering. Documents ARCHNEST_GUACD_* in backend/.env.example. Closes the Phase 5 deployment gap. Compose validated via `docker compose config`. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BbJV5nm8KPVH1oNJYKpnoF 2026-06-19 16:03:40 +00:00			`# Where guacd is reachable. In docker-compose this is the "guacd" service name;`
			`# for local dev run guacd separately and point these at it (default 127.0.0.1:4822).`
			`ARCHNEST_GUACD_HOST=127.0.0.1`
			`ARCHNEST_GUACD_PORT=4822`