Hardening from the live cutover validation:
- ComfyUI pinned to a known-good commit (COMFYUI_REF default cb9f6394… — has
Ideogram-4) instead of floating HEAD, so an upstream change can't silently break
users. Set COMFYUI_REF=HEAD to float. Entrypoint is now mounted into the container
so pin/bootstrap edits apply on `up` without a 30-min image rebuild (kept +x — a
non-exec mounted entrypoint = OCI "permission denied", caught in validation).
- OWUI WEBUI_SECRET_KEY no longer hardcoded to "change-this-secret-key" (a shared,
forgeable secret); now empty → OWUI generates+persists a strong per-deployment key
in the data volume. Override via host env only to share sessions across replicas.
Live-validated on the committed compose: end-to-end gen OWUI :8080 → ComfyUI →
Ideogram-4 (81 s); boot log confirms "pinned to cb9f6394" + GPU0 pin; OWUI on the
persisted key file.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
