# reuse-surface on railiance01

Federation service deployment for **`https://reuse.coulomb.social`**.

Companion workplans: **RAILIANCE-WP-0007** (Helm release), **REUSE-WP-0011**
(service + CLI).

## DNS

| Record | Value | Status |
|---|---|---|
| `reuse.coulomb.social` A | `92.205.62.239` | Operator confirmed 2026-06-15 |

Verify before deploy (propagation may lag):

```bash
dig +short reuse.coulomb.social A
```

Ingress host in chart: `charts/reuse-surface/values.yaml` → `ingress.host`.

## Release surface

| Item | Value |
|---|---|
| Namespace | `reuse` |
| Helm release | `reuse` |
| Chart | `charts/reuse-surface` |
| Values | `helm/reuse-surface-values.yaml` |
| Image | `gitea.coulomb.social/coulomb/reuse-surface:<tag>` |
| Secret | `reuse-surface-env` (`REUSE_SURFACE_TOKEN`) |

## Deploy

```bash
# 1. Pin image tag in helm/reuse-surface-values.yaml
# 2. Create secret (example — use SOPS handoff in production)
kubectl create namespace reuse --dry-run=client -o yaml | kubectl apply -f -
kubectl create secret generic reuse-surface-env \
  --namespace reuse \
  --from-literal=REUSE_SURFACE_TOKEN='<token>' \
  --dry-run=client -o yaml | kubectl apply -f -

make reuse-dry-run
make reuse-deploy
make reuse-status
```

## Smoke checks

```bash
curl -fsS https://reuse.coulomb.social/health

export REUSE_SURFACE_URL=https://reuse.coulomb.social
export REUSE_SURFACE_TOKEN=<token>
reuse-surface hub status
reuse-surface hub list
```

## Operations

```bash
make reuse-logs
make reuse-status
```

Image promotion: build from `coulomb/reuse-surface`, push to Gitea OCI, update
`helm/reuse-surface-values.yaml` `image.tag`, `make reuse-deploy`.