ops: scale down all non-critical services — dedicate resources to Neuron

Scaled to replicas: 0: fornax (coordinator/ui/workers), jellyfin via media, overseerr, plex, radarr, sonarr, bazarr, prowlarr, flaresolverr, ollama, harmonic-wordpress, docuseal, listmonk, memos, plane, redpanda, wp-coordinator
2026-04-24 20:07:41 -05:00
parent 6160e8e6b8
commit 91bfc42989
31 changed files with 1022 additions and 27 deletions
@@ -0,0 +1,43 @@
+variable "project_id" {
+  description = "GCP project ID"
+  type        = string
+  default     = "neuron-785695"
+}
+
+variable "image_tag" {
+  description = "Docker image tag to deploy"
+  type        = string
+  default     = "latest"
+}
+
+variable "cloudflare_zone_id_neurontechnologies" {
+  description = "Cloudflare zone ID for neurontechnologies.ai (look up from Legion Terraform state or Cloudflare dashboard)"
+  type        = string
+  # Set this in terraform.tfvars — do not hardcode here.
+  # To find: cloudflare_zone.neurontechnologies_ai.id in the Legion Terraform state,
+  # or: curl -s -X GET "https://api.cloudflare.com/client/v4/zones?name=neurontechnologies.ai" -H "X-Auth-Email: andersonwilliam85@gmail.com" -H "X-Auth-Key: <key>"
+}
+
+locals {
+  project_id = var.project_id
+  image      = "us-central1-docker.pkg.dev/${var.project_id}/neuron-marketing/marketing:${var.image_tag}"
+
+  # Production secrets from GCP Secret Manager
+  secrets = [
+    "stripe-secret-key",
+    "stripe-webhook-secret",
+    "stripe-price-professional",
+    "stripe-price-founding",
+  ]
+
+  # Env var names for each secret (uppercase, hyphen → underscore)
+  secret_env_map = {
+    "stripe-secret-key"        = "STRIPE_SECRET_KEY"
+    "stripe-webhook-secret"    = "STRIPE_WEBHOOK_SECRET"
+    "stripe-price-professional" = "STRIPE_PRICE_PROFESSIONAL"
+    "stripe-price-founding"    = "STRIPE_PRICE_FOUNDING"
+  }
+
+  # Static publishable key (not sensitive — lives in source)
+  stripe_publishable_key = "pk_live_51TPoHnJg9Fv1D3AUPMXnYyOJIVhn1FyH56zCMNnATo9tR7pO9lNDbXncp6VeDxm38qSdBHZPfqEBipUh3GZsWNyd00jvIO97E6"
+}