playbooks/roles/vhosts/acp_codex
2026-04-10 11:08:47 +08:00
..
defaults Add readonly SSH audit user role and playbooks 2026-04-10 11:08:47 +08:00
handlers fix(k3s): purge stuck external-dns release state 2026-04-04 17:09:37 +08:00
tasks chore: harden vhost and xfce xrdp playbooks 2026-04-09 17:45:11 +08:00
templates Add readonly SSH audit user role and playbooks 2026-04-10 11:08:47 +08:00
README.md feat: add acp bridge server deploy role 2026-04-09 06:20:07 +08:00

acp_codex

Codex ACP deployment role behind the unified acp-server.svc.plus ingress.

Installs:

  • caddy
  • bubblewrap

Exposes:

  • raw Codex upstream: codex app-server --listen ws://127.0.0.1:9001
  • public ACP bridge: 127.0.0.1:9010 via acp-bridge-codex
  • public base URL: https://acp-server.svc.plus/codex

Notes:

  • Caddy terminates TLS on acp-server.svc.plus and routes /codex* to this bridge.
  • The Go ACP server serves /acp and /acp/rpc under the unified /codex prefix.
  • ACP_ALLOWED_ORIGINS defaults to https://xworkmate.svc.plus,http://localhost:*,http://127.0.0.1:*.