com.publicdomainrelay.temp.compute.vm

{
  "mem": "4G",
  "cpus": 2,
  "disk": "40G",
  "role": "policy-engine-7a03996197662a2b",
  "$type": "com.publicdomainrelay.temp.compute.vm",
  "network": "500G",
  "location": {
    "region": "west",
    "country": "USA"
  },
  "createdAt": "2026-06-12T07:05:20.237Z",
  "user_data": "#cloud-config\n\nusers:\n  - name: agent\n    gecos: Policy Engine Agent\n    primary_group: agent\n    groups: [users]\n    shell: /bin/bash\n    sudo: \"ALL=(ALL) NOPASSWD:ALL\"\n    lock_passwd: true\n    no_user_group: false\n\nwrite_files:\n  - path: /etc/systemd/system/fedproxy-client.service\n    owner: root:root\n    permissions: '0644'\n    content: |\n      [Unit]\n      Description=FedProxy Client Service\n      After=network-online.target\n      Wants=network-online.target\n\n      [Service]\n      Type=simple\n      User=root\n      WorkingDirectory=/root\n      Environment=\"SERVICE=policy-engine-7a03996197662a2b\"\n      Environment=\"PORT=8080\"\n      Environment=\"ATPRP_URL=https://rp.fedproxy.com\"\n      Environment=\"AUTH_PLUGIN=oidc\"\n      Environment=\"MARKET_ACCEPT_JSON_PATH=/root/secrets/publicdomainrelay.com/market/accept.json\"\n      ExecStart=/usr/local/bin/fedproxy-client\n      Restart=always\n      RestartSec=5\n      TimeoutStopSec=10\n      StandardOutput=journal\n      StandardError=journal\n\n      [Install]\n      WantedBy=multi-user.target\n\n  - path: /etc/systemd/system/policy-engine.service\n    owner: root:root\n    permissions: '0644'\n    content: |\n      [Unit]\n      Description=Policy Engine Service\n      After=network-online.target\n      Wants=network-online.target\n\n      [Service]\n      Type=simple\n      User=agent\n      Group=agent\n      WorkingDirectory=/home/agent\n      Environment=\"BUNDLED_ACTIONS_DIR=/home/agent/bundled-actions\"\n      ExecStart=/usr/local/bin/policy_engine api --bind 127.0.0.1:8080\n      Restart=always\n      RestartSec=5\n      TimeoutStopSec=10\n      StandardOutput=journal\n      StandardError=journal\n\n      [Install]\n      WantedBy=multi-user.target\n\nruncmd:\n  - |\n      set -x\n\n      # Retry a command until it succeeds, backing off between attempts.\n      # Used to ride out transient GitHub download/network failures during boot.\n      retry() {\n        n=0\n        delay=5\n        until \"$@\"; do\n          n=$((n + 1))\n          echo \"command failed (attempt $n): $*; retrying in ${delay}s\" >&2\n          sleep \"$delay\"\n          if [ \"$delay\" -lt 60 ]; then\n            delay=$((delay * 2))\n          fi\n        done\n      }\n\n      retry sh -c \"curl -sfL 'https://github.com/publicdomainrelay/sshai/releases/download/latest/policy_engine_0.0.1-next_linux_amd64.tar.gz' | tar -xvz -C /usr/local/bin\"\n      retry sh -c \"curl -sfL 'https://github.com/publicdomainrelay/atproto-reverse-proxy/releases/download/latest/atproto-reverse-proxy_linux_amd64.tar.gz' | tar -xvz -C /usr/local/bin\"\n\n      mkdir -pv /home/agent/\n      cd $(mktemp -d)\n      retry sh -c \"curl -fL https://github.com/publicdomainrelay/sshai/archive/main.tar.gz | tar xz --wildcards --no-anchored 'src/policy_engine/bundled-actions/*' --strip-components=1\"\n      mv -v $(find . -name bundled-actions -type d) /home/agent/bundled-actions\n      chown -R agent:agent /home/agent/bundled-actions\n      cd -\n\n      systemctl start --no-block policy-engine.service\n      systemctl enable policy-engine.service\n      systemctl start --no-block fedproxy-client.service\n      systemctl enable fedproxy-client.service\n      systemctl daemon-reload\n"
}

did:plc:5svqtrhheairglgiiyvutzik | at://did:plc:5svqtrhheairglgiiyvutzik/com.publicdomainrelay.temp.compute.vm/3mo36gssye222