update

2026-07-25 16:11:08 -05:00
parent ad9c44bf28
commit ad90aad959
3 changed files with 69 additions and 33 deletions
@@ -123,10 +123,26 @@ For later updates, run the repository update helper from either webserver:
 ```

 The helper updates and health-checks the local broker first, then connects as
-`root` to the other broker (`10.10.1.121` or `10.10.1.122`) and performs the
-same local-only check there. This provides a sequential rolling update from
-either node. An unreachable peer is skipped with a warning; a reachable peer
-whose update fails causes the command to fail.
+`TAPM_UPDATE_SSH_USER` to each comma-separated host in `TAPM_UPDATE_PEERS` and
+performs the same local-only check there. This provides a sequential rolling
+update from any node. An unreachable peer is skipped with a warning; a reachable
+peer whose update fails causes the command to fail. The SSH user defaults to
+`root` when omitted.
+
+Configure each webserver's `.env` with its other broker:
+
+```dotenv
+# Webserver-Node1
+TAPM_UPDATE_PEERS=10.10.1.122
+TAPM_UPDATE_SSH_USER=root
+
+# Webserver-Node2
+TAPM_UPDATE_PEERS=10.10.1.121
+TAPM_UPDATE_SSH_USER=root
+```
+
+Additional peers can be listed with commas. The updater reads only these named
+settings and does not source `.env` as executable shell code.

 Each node fetches and compares its current tracked branch with its upstream. If
 both commits match, that node's Docker services are untouched. When an update