clawup/Pulumi.dev.yaml.example at main · stepandel/clawup · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
# Pulumi Stack Configuration - Development Environment
#
# This configuration pulls secrets from Pulumi ESC.
# See esc/clawup-secrets.yaml.example for the ESC environment template.
#
# Setup:
#   1. Create ESC environment: pulumi env init <org>/clawup-dev
#   2. Copy secrets from esc/clawup-secrets.yaml.example
#   3. Run: pulumi up

environment:
  - clawup-dev

config:
  # AWS region for deployment
  aws:region: us-east-1

  # Tailscale DNS name (your tailnet domain)
  # Example: tail12345.ts.net
  clawup:tailnetDnsName: ${esc:tailnetDnsName}

  # Instance type for all agents
  # WARNING: t3.micro is too small (1GB RAM insufficient)
  clawup:instanceType: t3.medium

  # Owner name (used in workspace templates)
  clawup:ownerName: ${esc:ownerName}

  # Shared secrets (pulled from ESC)
  clawup:anthropicApiKey:
    fn::secret: ${esc:anthropicApiKey}
  clawup:tailscaleAuthKey:
    fn::secret: ${esc:tailscaleAuthKey}

  # =========================================================================
  # Per-agent Slack credentials (Socket Mode)
  # =========================================================================
  # Bot Token (xoxb-...) + App Token (xapp-...) for each agent

  clawup:pmSlackBotToken:
    fn::secret: ${esc:pmSlackBotToken}
  clawup:pmSlackAppToken:
    fn::secret: ${esc:pmSlackAppToken}

  clawup:engSlackBotToken:
    fn::secret: ${esc:engSlackBotToken}
  clawup:engSlackAppToken:
    fn::secret: ${esc:engSlackAppToken}

  clawup:testerSlackBotToken:
    fn::secret: ${esc:testerSlackBotToken}
  clawup:testerSlackAppToken:
    fn::secret: ${esc:testerSlackAppToken}

  # =========================================================================
  # Per-agent Linear credentials
  # =========================================================================

  clawup:pmLinearApiKey:
    fn::secret: ${esc:pmLinearApiKey}
  clawup:engLinearApiKey:
    fn::secret: ${esc:engLinearApiKey}
  clawup:testerLinearApiKey:
    fn::secret: ${esc:testerLinearApiKey}