paas-overview - SKILL.md Agent Skill

name: paas-overview description: Overview of the PaaS stack - health checks, service URLs, and common operations. metadata: {"moltbot":{"emoji":"🏠","requires":{"env":["GITEA_TOKEN","COOLIFY_TOKEN","N8N_TOKEN"]}}}

PaaS Stack Overview

This skill provides an overview of the self-hosted PaaS stack and common operations.

Services

Service	Purpose	Env Vars
Gitea	Git repository hosting	`GITEA_TOKEN`, `GITEA_URL`
Coolify	Application deployment	`COOLIFY_TOKEN`, `COOLIFY_URL`
n8n	Workflow automation	`N8N_TOKEN`, `N8N_URL`
LobeChat	AI chat interface	`LOBE_URL`
OpenClaw	AI gateway	`OPENCLAW_GATEWAY_TOKEN`

Quick Health Check

echo "=== Service Health ==="
echo "Gitea: $(curl -sf $GITEA_URL/api/healthz && echo OK || echo FAIL)"
echo "Coolify: $(curl -sf $COOLIFY_URL/api/health && echo OK || echo FAIL)"
echo "n8n: $(curl -sf $N8N_URL/healthz && echo OK || echo FAIL)"
echo "LobeChat: $(curl -sf $LOBE_URL/api/health && echo OK || echo FAIL)"

Available Skills

Skill	Purpose	Quick Command
`gitea`	Repository management	List repos, create branches, manage PRs
`coolify`	Deployment management	Deploy apps, manage envs, view logs
`n8n`	Workflow automation	Create workflows, manage credentials
`ci-cd`	CI/CD pipeline setup	Connect repos to Coolify
`lobechat`	LobeChat integration	Knowledge base queries

Common Operations

Create and Deploy a New App

# 1. Create repository in Gitea
curl -X POST "$GITEA_URL/api/v1/user/repos" \
  -H "Authorization: token $GITEA_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name": "my-app", "auto_init": true}'

# 2. Connect to Coolify (creates deploy key + webhook)
bash /srv/paas/scripts/setup-ci-cd.sh my-app myapp 3000

# 3. Push code → auto deploys via webhook

CI/CD Architecture

Push to Gitea
    ↓
Webhook → https://coolify.domain/webhooks/source/gitea/events/manual?app={uuid}
    ↓
Coolify clones via SSH (git@gitea:user/repo.git)
    ↓
Build container → Deploy to coolify network
    ↓
Traefik routes by domain → Container

Key requirements:

Gitea must be on coolify network (for SSH clone access)
Coolify proxy must be on paas-network (for cloudflared access)
Deploy key in both Coolify and Gitea
Webhook secret matching manual_webhook_secret_gitea

Check Deployment Status

curl -s "$COOLIFY_URL/api/v1/deployments" \
  -H "Authorization: Bearer $COOLIFY_TOKEN" | jq '.[0:3] | .[] | {status, created_at}'

Trigger Manual Deployment

curl -X POST "$COOLIFY_URL/api/v1/applications/APP_UUID/restart" \
  -H "Authorization: Bearer $COOLIFY_TOKEN"

Create Automation Workflow

# List n8n workflows
curl -s "$N8N_URL/api/v1/workflows" \
  -H "X-N8N-API-KEY: $N8N_TOKEN" | jq '.data[] | {id, name, active}'

Scripts

Script	Purpose
`bash /srv/paas/scripts/setup-ci-cd.sh`	Connect repo → Coolify with deploy keys
`bash /srv/paas/scripts/refresh-tokens.sh`	Regenerate API tokens
`bash /srv/paas/scripts/bootstrap.sh`	Full stack setup

Note: Use bash prefix for cross-platform compatibility.

Token Refresh

If API calls fail with authentication errors:

# Refresh all tokens
bash /srv/paas/scripts/refresh-tokens.sh --all

# Refresh specific service
bash /srv/paas/scripts/refresh-tokens.sh --gitea
bash /srv/paas/scripts/refresh-tokens.sh --coolify

Network Architecture

The stack uses two bridged networks for full inter-service communication:

Network	Services	Purpose
`paas-network`	All core services	Stack internal communication
`coolify`	Deployed apps + proxy	Coolify-managed applications

All core services are connected to BOTH networks, allowing:

Stack services to communicate with each other
Stack services to communicate with deployed applications
n8n workflows to call deployed app APIs
OpenClaw agent to interact with deployed services

Network Troubleshooting

# Check which networks a service is on
docker inspect gitea --format '{{range $k, $v := .NetworkSettings.Networks}}{{$k}} {{end}}'

# Connect all core services to coolify network (if missing)
docker network connect coolify gitea
docker network connect coolify n8n
docker network connect coolify openclaw-cli
docker network connect coolify lobe-chat
docker network connect paas-network coolify-proxy

# Verify all connections
for svc in gitea n8n openclaw-cli lobe-chat; do
    echo "$svc: $(docker inspect $svc --format '{{range $k, $v := .NetworkSettings.Networks}}{{$k}} {{end}}')"
done

Service-Specific Skills

For detailed operations, use the dedicated skills:

Gitea operations: Read /srv/paas/skills/gitea/SKILL.md
Coolify operations: Read /srv/paas/skills/coolify/SKILL.md
n8n operations: Read /srv/paas/skills/n8n/SKILL.md
CI/CD setup: Read /srv/paas/skills/ci-cd/SKILL.md

Environment Variables

All service URLs and tokens are available as environment variables:

# Check available env vars
env | grep -E "_URL|_TOKEN" | grep -v "="