Add TFGrid single-VM deployment with web gateway (HTTPS) #41

Open
opened 2026-02-27 00:25:13 +00:00 by mik-tf · 0 comments
Owner

Problem

Hero OS has a working production Docker container but no deployment automation for TFGrid.

Solution

Add deploy/single-vm/ following the established pattern (hero_books, marketplace):

  • OpenTofu config with grid_name_proxy for HTTPS via TFGrid web gateway (no public IPv4 needed)
  • setup.sh — install Docker, pull container, run with zinit auto-restart
  • update.sh — quick pull + restart
  • MakefileENV=prod|dev multi-environment orchestration
  • envs/ — per-environment config (prod/dev)

Gateway handles SSL termination automatically. Container exposes Hero OS on internal port, gateway proxies HTTPS traffic over WireGuard.

Container

forge.ourworld.tf/lhumina_code/hero_zero:latest — pre-built production image with all services.

## Problem Hero OS has a working production Docker container but no deployment automation for TFGrid. ## Solution Add `deploy/single-vm/` following the established pattern (hero_books, marketplace): - **OpenTofu** config with `grid_name_proxy` for HTTPS via TFGrid web gateway (no public IPv4 needed) - **setup.sh** — install Docker, pull container, run with zinit auto-restart - **update.sh** — quick pull + restart - **Makefile** — `ENV=prod|dev` multi-environment orchestration - **envs/** — per-environment config (prod/dev) Gateway handles SSL termination automatically. Container exposes Hero OS on internal port, gateway proxies HTTPS traffic over WireGuard. ## Container `forge.ourworld.tf/lhumina_code/hero_zero:latest` — pre-built production image with all services.
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
lhumina_code/hero_services#41
No description provided.