# /etc/default/second-brain-transcribe (template — copy + fill in the password). # # systemd reads this BEFORE dropping to User=herbyadmin, so installing it # root:root mode 0600 is the right shape. NEVER commit the real value. # # Sourcing the password: # The lovebug Postgres password is the LOVEBUG_PG_PASSWORD value in # /opt/backups/postgres-consolidation/credentials.env on herbys-dev # (mode 0600, host-only). It's a 64-character hex string — no URL # encoding required. # # On herbys-dev there's already a ready-to-scp env file with the real # password populated: # /opt/backups/postgres-consolidation/second-brain-transcribe.env # scp that to the tower instead of hand-copying: # scp herbys-dev:/opt/backups/postgres-consolidation/second-brain-transcribe.env \ # tower:/tmp/sb-env # sudo install -m 0600 -o root -g root /tmp/sb-env \ # /etc/default/second-brain-transcribe # rm /tmp/sb-env # # DB host is db.wg.herbylab.dev:5432 over WireGuard, database name # `petalbrain` (the post-consolidation rename). # # Note: this file is NOT a shell init script — `export VAR=...` # additions in your interactive shell don't apply here, and changes # require `systemctl restart second-brain-transcribe` to take effect. SECOND_BRAIN_DATABASE_URL=postgresql://lovebug:REPLACE_WITH_LOVEBUG_PG_PASSWORD@db.wg.herbylab.dev:5432/petalbrain # OPTIONAL — only set to override the [whisper] block in settings.toml. # Defaults are large-v3 / cuda / float16. # WHISPER_MODEL=large-v3 # WHISPER_DEVICE=cuda # WHISPER_COMPUTE_TYPE=float16 # OPTIONAL — identifier stamped into sources.claimed_by (default tower:). # SECOND_BRAIN_WORKER_ID=tower-main