Public documentation for governed AI labor
SDKs/Governance/Connectors
Arx / Docs / EU Aptible Isolation Setup

Documentation

EU Aptible Isolation Setup

Project-Agent / arxsec-api/EU_APTIBLE_SETUP.md

Project-Agent repo-root arxsec-api/EU_APTIBLE_SETUP.md

This repo now supports split Aptible deployments for US and EU environments.

Required GitHub Secrets

US

  • APTIBLE_US_USERNAME
  • APTIBLE_US_PASSWORD
  • APTIBLE_US_ENVIRONMENT
  • APTIBLE_US_API_APP
  • APTIBLE_US_FRONTEND_APP
  • NEXT_PUBLIC_SUPABASE_URL_US
  • NEXT_PUBLIC_SUPABASE_ANON_KEY_US
  • NEXT_PUBLIC_API_URL_US

EU

  • APTIBLE_EU_USERNAME
  • APTIBLE_EU_PASSWORD
  • APTIBLE_EU_ENVIRONMENT
  • APTIBLE_EU_API_APP
  • APTIBLE_EU_FRONTEND_APP
  • NEXT_PUBLIC_SUPABASE_URL_EU
  • NEXT_PUBLIC_SUPABASE_ANON_KEY_EU
  • NEXT_PUBLIC_API_URL_EU

Deploy Behavior

  • Pushes to main deploy the US stack by default.
  • EU deploys run via manual workflow dispatch with region=eu (or all).

Runtime Configuration

Set these API env vars per deployment:

  • APTIBLE_DEFAULT_REGION (us or eu)
  • APTIBLE_US_ENVIRONMENT, APTIBLE_US_API_APP, APTIBLE_US_FRONTEND_APP
  • APTIBLE_EU_ENVIRONMENT, APTIBLE_EU_API_APP, APTIBLE_EU_FRONTEND_APP
  • ARXSEC_API_URL_US, ARXSEC_API_URL_EU
  • ARXSEC_APP_URL_US, ARXSEC_APP_URL_EU

Tenant Routing Guidance

Use app/core/tenant_region.py to resolve tenant region from org attributes:

  • explicit region / data_region
  • fallback inferred from country_code
  • fallback to APTIBLE_DEFAULT_REGION

Requests for EU tenants should be routed only to EU API/frontend domains. The auth layer now enforces host-region affinity when ARXSEC_API_URL_US/EU are configured.