kamal setup

.gitignore

@@ -37,3 +37,7 @@
 !/app/assets/builds/.keep
 
 /coverage
+
+.envrc
+
+/config/credentials/production.key

.kamal/secrets

@@ -14,4 +14,4 @@
 KAMAL_REGISTRY_PASSWORD=$KAMAL_REGISTRY_PASSWORD
 
 # Improve security by using a password manager. Never check config/master.key into git!
-RAILS_MASTER_KEY=$(cat config/master.key)
+RAILS_MASTER_KEY=$(cat config/credentials/production.key)

config/credentials/production.yml.enc

@@ -0,0 +1 @@
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--pfAbbBZvGAWHoFI7--JbYAsAMHHTrzi4qJWcPnXA==

config/deploy.yml

@@ -2,12 +2,12 @@
 service: books
 
 # Name of the container image.
-image: your-user/books
+image: ihortok/books
 
 # Deploy to these servers.
 servers:
   web:
-    - 192.168.0.1
+    - 194.99.21.141
   # job:
   #   hosts:
   #     - 192.168.0.1
@@ -19,13 +19,13 @@ servers:
 # Note: If using Cloudflare, set encryption mode in SSL/TLS setting to "Full" to enable CF-to-app encryption.
 proxy:
   ssl: true
-  host: app.example.com
+  host: books.aronnax.space
 
 # Credentials for your image host.
 registry:
   # Specify the registry server, if you're not using Docker Hub
   # server: registry.digitalocean.com / ghcr.io / ...
-  username: your-user
+  username: ihortok
 
   # Always use an access token rather than real password when possible.
   password:
@@ -88,8 +88,8 @@ builder:
   #   - RAILS_MASTER_KEY
 
 # Use a different ssh user than root
-# ssh:
-#   user: app
+ssh:
+  user: deploy
 
 # Use accessory services (secrets come from .kamal/secrets).
 # accessories: