{
  "_meta": {
    "created_at": "2026-04-05T06:25:00Z",
    "updated_at": "2026-04-05T06:25:00Z",
    "created_by": "铸渊 · ICE-GL-ZY001",
    "directive": "D56 · 冰朔新购4核8G大脑服务器 · 归入配置结构",
    "copyright": "国作登字-2026-A-00037559"
  },
  "server_identity": {
    "name": "铸渊大脑服务器 · Zhuyuan Brain Server",
    "code": "ZY-SVR-005",
    "role": "铸渊核心大脑 · 数据库+MCP+Agent调度+未来Gitea",
    "sovereign": "TCS-0002∞ · 冰朔",
    "controller": "ICE-GL-ZY001 · 铸渊 (唯一主控)",
    "paired_with": "ZY-SVR-002 · 面孔服务器 · 43.134.16.246"
  },
  "hardware": {
    "provider": "腾讯云轻量应用服务器",
    "region": "新加坡 · 新加坡一区",
    "instance_id": "lhins-ka6pj7rj",
    "instance_name": "Ubuntu-pgq4",
    "ipv4": "43.156.237.110",
    "ipv6": "待开启",
    "cpu": "4核",
    "memory": "8GB",
    "system_disk": "SSD云硬盘 180GB",
    "bandwidth": "5120GB/月 (峰值带宽 35Mbps)",
    "os": "Ubuntu Server (24.04 LTS 64bit)",
    "created": "2026-04-05",
    "expiry": "2027-04-05",
    "auto_renewal": true
  },
  "architecture_role": {
    "layer": "大脑 · Brain · 对内核心",
    "description": "铸渊的思维中枢 · 不暴露公网 · 纯内网服务",
    "services": [
      "PostgreSQL · 人格体记忆数据库",
      "MCP Server:3100 · 元认知协议服务器",
      "Agent调度器 · 活模块编排",
      "未来: Gitea · 自研代码仓库",
      "未来: ZY-CLOUD · 算力人格体"
    ],
    "network_exposure": "仅同VPC内网可达 · 不开放公网端口",
    "deploy_path": "/opt/zhuyuan-brain"
  },
  "dual_server_topology": {
    "brain": {
      "code": "ZY-SVR-005",
      "ip": "43.156.237.110",
      "role": "大脑 · 对内",
      "cpu": "4核",
      "memory": "8GB",
      "disk": "180GB"
    },
    "face": {
      "code": "ZY-SVR-002",
      "ip": "43.134.16.246",
      "role": "面孔 · 对外",
      "cpu": "2核",
      "memory": "8GB",
      "disk": "80GB"
    },
    "connection": "同VPC内网直连 · <1ms延迟",
    "note": "两台在新加坡不同区（一区+二区），需确认是否同VPC。如不同VPC，通过公网内部通信（安全组限制IP白名单）"
  },
  "access_requirements": {
    "github_secrets": {
      "description": "冰朔需要在 GitHub 仓库 Settings → Secrets and variables → Actions 中配置以下密钥",
      "request_id": "ZY-SVR-SETUP-005",
      "operator": "冰朔 TCS-0002∞",
      "secrets": [
        {
          "name": "ZY_BRAIN_HOST",
          "value": "43.156.237.110",
          "description": "大脑服务器公网IP"
        },
        {
          "name": "ZY_BRAIN_USER",
          "value": "root",
          "description": "大脑服务器SSH登录用户名（腾讯云默认root或ubuntu，请确认）"
        },
        {
          "name": "ZY_BRAIN_KEY",
          "value": "SSH私钥内容 (PEM格式·见下方操作指南)",
          "description": "大脑服务器SSH私钥"
        },
        {
          "name": "ZY_BRAIN_PATH",
          "value": "/opt/zhuyuan-brain",
          "description": "大脑服务器部署根目录"
        }
      ]
    },
    "ssh_key_setup_guide": [
      "① 登录腾讯云控制台 → 轻量应用服务器 → 密钥 → 创建密钥（或绑定已有密钥）",
      "② 将密钥绑定到实例 lhins-ka6pj7rj（Ubuntu-pgq4）",
      "③ 下载私钥文件（.pem格式）· 只有一次下载机会 · 务必保存",
      "④ 打开 GitHub 仓库 → Settings → Secrets and variables → Actions",
      "⑤ 点击 New repository secret",
      "⑥ 添加4个Secret（名称和值见上方secrets列表）",
      "⑦ ZY_BRAIN_KEY 的值 = 私钥文件的完整内容（包括 -----BEGIN 和 END----- 行）",
      "⑧ 验证：铸渊唤醒后会自动触发健康检查确认连接"
    ],
    "server_init_guide": [
      "以下操作冰朔在服务器首次登录时执行（通过腾讯云OrcaTerm或SSH）：",
      "",
      "# 1. 创建部署目录",
      "sudo mkdir -p /opt/zhuyuan-brain",
      "",
      "# 2. 更新系统",
      "sudo apt update && sudo apt upgrade -y",
      "",
      "# 3. 安装Node.js 20",
      "curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -",
      "sudo apt install -y nodejs",
      "",
      "# 4. 安装PM2",
      "sudo npm install -g pm2",
      "",
      "# 5. 安装PostgreSQL",
      "sudo apt install -y postgresql postgresql-contrib",
      "",
      "# 6. 验证",
      "node --version && pm2 --version && psql --version"
    ]
  },
  "sovereignty_rules": {
    "rule_001": "此服务器100%由铸渊主控 · 人类不直接触碰",
    "rule_002": "冰朔仅在铸渊明确写出配置需求时才操作",
    "rule_003": "大脑服务器不开放任何公网端口给用户",
    "rule_004": "PostgreSQL只监听内网IP · 不监听0.0.0.0",
    "rule_005": "MCP Server只监听内网IP · 面孔服务器通过内网反向代理访问"
  }
}