DEPLOYMENT_INVENTORY.md

Deployment Inventory

Current state as of 2026-05-15.

Domains

• app.arxsec.io resolves to Aptible
• api.arxsec.io resolves to Aptible

Repo

• GitHub repo: GetHammerpath/arxsec-app
• Default branch: main
• GitHub environments: none configured yet
• GitHub Actions secrets: none configured yet
• GitHub deployments: none recorded yet

Repo-owned config

• .github/workflows/api-quality.yml
• .github/workflows/frontend-quality.yml
• .github/workflows/openapi.yml
• .github/workflows/security.yml
• .github/workflows/aptible.yml
• .github/workflows/deploy.yml
• aptible.yml
• Dockerfile
• Dockerfile.frontend

Secret names expected by workflows

• APTIBLE_US_USERNAME
• APTIBLE_US_PASSWORD
• APTIBLE_US_ENVIRONMENT
• APTIBLE_US_API_APP
• APTIBLE_US_FRONTEND_APP
• APTIBLE_EU_USERNAME
• APTIBLE_EU_PASSWORD
• APTIBLE_EU_ENVIRONMENT
• APTIBLE_EU_API_APP
• APTIBLE_EU_FRONTEND_APP
• ARXSEC_ENCRYPTION_KEY
• DD_API_KEY
• NEXT_PUBLIC_API_URL
• NEXT_PUBLIC_API_URL_US
• NEXT_PUBLIC_API_URL_EU
• NEXT_PUBLIC_APP_URL
• NEXT_PUBLIC_APP_URL_US
• NEXT_PUBLIC_APP_URL_EU
• NEXT_PUBLIC_SUPABASE_URL
• NEXT_PUBLIC_SUPABASE_URL_US
• NEXT_PUBLIC_SUPABASE_URL_EU
• NEXT_PUBLIC_SUPABASE_ANON_KEY
• NEXT_PUBLIC_SUPABASE_ANON_KEY_US
• NEXT_PUBLIC_SUPABASE_ANON_KEY_EU
• APTIBLE_HEALTHCHECK_URL_US
• APTIBLE_HEALTHCHECK_URL_EU

External dependencies still not migrated

• The old repo GetHammerpath/Project-Agent currently holds all deployment-related GitHub secrets.
• The old repo GetHammerpath/Project-Agent currently holds the GitHub environments Production and Preview.
• The old repo has all recorded GitHub deployment history.
• This repo has deployment workflows, but without secrets they cannot deploy independently yet.

Required cutover before this repo is fully independent

1. Recreate the Aptible and public env-var secrets in GetHammerpath/arxsec-app.
2. Recreate any required GitHub environments and protections on this repo.
3. Trigger deploys from this repo and verify both app.arxsec.io and api.arxsec.io.
4. Disable deployment workflows or remove deploy secrets from GetHammerpath/Project-Agent after validation.