Requirements¶
Infrastructure¶
| Dependency | Used for |
|---|---|
Scaleway, region fr-par |
Serverless Containers, Managed Database for PostgreSQL, Container Registry, Object Storage, Instances, Secret Manager, IAM, Transactional Email |
| Cloudflare | Pages, Workers (with Durable Objects), DNS for digilan-edge.com |
| GitLab | Repositories, CI, OpenTofu state (HTTP backend) |
Creating the scoped IAM applications (OTA reader/publisher, SMTP) needs a
Scaleway key with IAM management rights. Each environment's provider pins the
Scaleway organization through scaleway_organization_id.
Build-side tools¶
Needed only to run things from a workstation; CI runs them in GitLab runners.
| Tool | Version | Used by |
|---|---|---|
| Go | 1.25 | nexus, edge agent (authz: 1.24) |
| Node.js | 22 | portal, realtime Worker |
| OpenTofu | 1.8+ | infra |
glab |
current | glab opentofu init, CI variables and jobs |
wrangler |
4 | Worker secrets, manual Pages/Worker deploys |
buf |
current | protobuf regeneration |
scw |
current | inspecting containers, registry, databases |
psql |
15+ | database maintenance |
jq, curl |
security.tf provisioners, scripts/relay-replace.sh |
Edge device¶
| Requirement | Details |
|---|---|
| OS | OpenBSD 7.8 |
| Arch | amd64 or arm64 (CI publishes both) |
| Network | WAN and LAN NICs; one NIC is enough for a virtual test |
| Outbound | TCP 443 to the environment's nexus and realtime hosts, and to s3.fr-par.scw.cloud for agent downloads. Published services also need UDP to the assigned relay (relay_ports, default 51820). |
The platform never opens a connection to the agent; everything is initiated from the device.