kai/infra-docker-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

configure Bun CA trust for local embeddings

Browse Source
This commit is contained in:
Codex
2026-09-07 21:27:25 -07:00
parent 700f3f2cbd
commit de3357ca58
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/unraid/supermemory-poc/README.md
+3 -1
View File
@@ -36,7 +36,9 @@ The `supermemory-fetch` init service downloads the exact release asset once,
checks its SHA-256, and stores it in the POC appdata directory. Subsequent checks its SHA-256, and stores it in the POC appdata directory. Subsequent
starts only verify the existing binary. It also copies the CA bundle from the starts only verify the existing binary. It also copies the CA bundle from the
pinned fetch image so the slim runtime can download local embedding model pinned fetch image so the slim runtime can download local embedding model
artifacts over verified HTTPS. No custom image build is required. artifacts over verified HTTPS. Both OpenSSL-style clients and the bundled Bun
runtime are pointed at that bundle; TLS verification remains enabled. No
custom image build is required.
## First boot and authentication ## First boot and authentication
servers/unraid/supermemory-poc/compose.yaml
+1
View File
@@ -62,6 +62,7 @@ services:
SUPERMEMORY_EMBEDDING_RAM_LIMIT: 2gb SUPERMEMORY_EMBEDDING_RAM_LIMIT: 2gb
SUPERMEMORY_INGEST_CONCURRENCY: "1" SUPERMEMORY_INGEST_CONCURRENCY: "1"
SSL_CERT_FILE: /opt/supermemory/bin/ca-certificates.crt SSL_CERT_FILE: /opt/supermemory/bin/ca-certificates.crt
NODE_EXTRA_CA_CERTS: /opt/supermemory/bin/ca-certificates.crt
OPENAI_API_KEY: ${OPENAI_API_KEY:?set OPENAI_API_KEY in Arcane environment} OPENAI_API_KEY: ${OPENAI_API_KEY:?set OPENAI_API_KEY in Arcane environment}
OPENAI_BASE_URL: ${OPENAI_BASE_URL:-} OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
OPENAI_MODEL: ${OPENAI_MODEL:-gpt-5.1} OPENAI_MODEL: ${OPENAI_MODEL:-gpt-5.1}