homelab-codex-ws/services/ollama/env.example
oskar 38cb204a64 fix(ollama): declare service on SOLARIA, restrict bind, add cutover runbook
Ollama's service.yaml/docker-compose.yml declared owner_node: solaria but
was never added to hosts/solaria/services.yaml, the manifest deploy-node.sh
actually reads — so it stayed running manually/natively instead of via the
declarative pipeline. Add the missing entry.

Also switch the port publish from 0.0.0.0 to loopback + TAILSCALE_BIND_IP
(same convention as llm-gateway@PIHA), since this is a private service and
llm-gateway@PIHA is the only consumer beyond the host itself.

Live cutover (relocating the existing native model store, disabling the
systemd unit, bringing up the container, verifying bge-m3 embeddings +
GPU use) is documented in docs/infra/ollama-solaria-cutover-2026-07-15.md
but not executed here — no SSH access to SOLARIA from this worktree.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-15 16:09:08 +02:00

9 lines
354 B
Plaintext

# Copy to .env next to docker-compose.yml (gitignored); docker compose picks
# it up automatically. Same convention as services/llm-gateway.
# Tailscale IP of the SOLARIA node. Bind the mesh-facing publish ONLY to this
# IP — never 0.0.0.0. Verify when rebuilding the host: tailscale ip -4.
TAILSCALE_BIND_IP=100.100.231.104
# CUDA_VISIBLE_DEVICES=0