feat(frank-tts): deploy wiring for the 7772 voice endpoint, and voice naming written down
Stage 2 of the voice stack. Repo state only: nothing deployed, no host touched, no container started. - `frank-tts` is now registered everywhere a dankclaw service has to be: `SERVICE_ORDER` (after `frank-tts-engine`, before the consumers), the planner's dankclaw set, `deploy-remote.sh`'s allowlist + dispatch + a `deploy_frank_tts` handler, and `deploy.sh`'s dispatch regex — plus the `build_compose_image` arm naming `dankclaw/voiceservice/Containerfile`, without which the build silently returns 0 and the unit's `Pull=never` tag never exists. - The unit joins TWO networks, in order: `dankclaw_default` first (default route, where consumers and open-notebook live), then the voice bridge. `TTS_UPSTREAM` moves from `host.containers.internal:8880` to `http://frank-tts-engine:8880` — the actual fix for a shape that could never work, since a bridge container cannot reach a host-loopback bind and the engine publishes nothing at all. - `Wants=`/`After=` on the engine, never `Requires=`: the `llama-tts-cli` rollback backend needs no upstream, so a broken engine may delay this endpoint but must not take its unit down. - The handler installs the engine's quadlet pair too, because a referenced `Network=` file the generator cannot find means no façade unit is produced at all, and `--only frank-tts` has no other way to get it. It creates `/home/dank/voices` as the deploy user (rootless podman would auto-create a missing bind source root-owned, which reads as "no voices"), and gates on podman's recorded health. - Voice naming is now written down where it can be found: a voice is a lowercase directory name matching `^[a-z0-9][a-z0-9._-]*$`, at most 64 chars. That shape is the intersection of two rules that disagree — the shim would accept mixed case, the engine lowercases names — so a mixed-case pack resolves on one side only, and the boot warmer refuses it loudly. `narrator1/2/3` are load-bearing for open-notebook. - Homepage card for the pair, `wip: down` and hidden, probing `127.0.0.1:7772`; the engine gets no card because it publishes nothing and could never be probed. - **No Prometheus job, deliberately.** No `/metrics` exists on the shim, this Prometheus 3 refuses HTML/JSON bodies (the existing `comfyui` and `services` probes are documented down for exactly that), and `LlmEndpointDown` is scoped `up{job=~"frank-.*"}` — so a `/health` job would page on Signal for a healthy endpoint. Recorded in the page instead of quietly skipped. - Vault: new [[Frank TTS]] page linked from the index; [[Frank TTS Engine]] now points at it for the pair's public signal; log entry for the day. - Seam grows to 25 tests: the generator's rendering of the pair (both attachments, first-network order, one publish, Wants-not-Requires, bounded per-unit blocks), the env file's upstream checked as a network JOIN rather than a string, planner separation and order, the handler's steps, the card's gating, routing that selects both seams for either deployable.
This commit is contained in:
Frank
@@ -66,6 +66,7 @@ SERVICE_ORDER = (
|
||||
# a dependency of the 7772 facade, so it is planned (and therefore
|
||||
# restarted) first.
|
||||
"frank-tts-engine",
|
||||
"frank-tts",
|
||||
"frank-dragoon",
|
||||
"frank-zealot",
|
||||
"frank-archon",
|
||||
@@ -102,6 +103,7 @@ DANKCLAW_SERVICES = {
|
||||
"frank-dragoon",
|
||||
"frank-zealot",
|
||||
"frank-tts-engine",
|
||||
"frank-tts",
|
||||
}
|
||||
|
||||
DANKSERVER_SERVICES = {
|
||||
@@ -342,6 +344,15 @@ def services_for_path(path: str, target: str) -> set[str]:
|
||||
"Containerfile.engine", "tts-engine-start.sh",
|
||||
"tts-engine-warm.sh"}:
|
||||
_add(services, "frank-tts-engine")
|
||||
# The 7772 façade is the other deployable in this directory. The
|
||||
# bridge file is named after the ENGINE unit (install_quadlet copies
|
||||
# `$unit.network` beside `$unit.container`), yet both units attach
|
||||
# to it, so a subnet change is a change to both. Anything else here
|
||||
# belongs to neither deployable and plans nothing.
|
||||
if parts[-1] in {"frank-tts.container", "app.py", "Containerfile"}:
|
||||
_add(services, "frank-tts")
|
||||
if parts[-1] == "frank-tts-engine.network":
|
||||
_add(services, "frank-tts")
|
||||
return services
|
||||
# frank-dragoon left the quadlet shape on 2026-09-19 (CIRU v4.4.1 host
|
||||
# build, root unit): its files live in scripts/ and map there.
|
||||
|
||||
@@ -92,7 +92,7 @@ service_is_allowed() {
|
||||
dankclaw:caddy|dankclaw:homepage|dankclaw:seerr|dankclaw:marreta|\
|
||||
dankclaw:open-notebook|\
|
||||
dankclaw:frank-dragoon|dankclaw:frank-zealot|\
|
||||
dankclaw:frank-tts-engine|\
|
||||
dankclaw:frank-tts-engine|dankclaw:frank-tts|\
|
||||
dankserver:romm-mariadb|dankserver:romm-redis|dankserver:romm|\
|
||||
dankserver:copyparty|dankserver:jellyfin|dankserver:calibre-web|dankserver:calibre-server|dankserver:plex|dankserver:tautulli|\
|
||||
dankserver:prowlarr|dankserver:qbittorrent|dankserver:radarr|\
|
||||
@@ -550,6 +550,14 @@ build_compose_image() {
|
||||
image="franksdank/$service:latest"
|
||||
containerfile="dankclaw/$service/Containerfile"
|
||||
;;
|
||||
frank-tts)
|
||||
# The 7772 façade: stdlib python + ffmpeg, app.py copied in. Listed
|
||||
# explicitly because build_compose_image's `*)` arm returns 0 — an
|
||||
# unlisted service builds nothing and the unit's Pull=never then
|
||||
# fails on a tag that was never made.
|
||||
image=franksdank/frank-tts:latest
|
||||
containerfile=dankclaw/voiceservice/Containerfile
|
||||
;;
|
||||
frank-tts-engine)
|
||||
# The arm A TTS engine (qwentts.cpp `tts-server`). Built from
|
||||
# source at a pinned upstream commit, so the build needs network
|
||||
@@ -801,6 +809,43 @@ deploy_frank_tts_engine() {
|
||||
podman exec frank-tts-engine /app/warm-voices.sh
|
||||
}
|
||||
|
||||
deploy_frank_tts() {
|
||||
# The 7772 façade in front of frank-tts-engine. Weights and the engine build
|
||||
# are not this handler's business, but the BRIDGE FILE is: this unit
|
||||
# references frank-tts-engine.network, and with a referenced Network= file
|
||||
# absent the v1 generator refuses to produce the container unit at all. So
|
||||
# `--only frank-tts` installs the engine's quadlet pair too — idempotent, and
|
||||
# it is what makes the façade deployable on a host where the engine was
|
||||
# planned separately or not at all.
|
||||
#
|
||||
# The voice packs are host state (the pack builder writes them), but the
|
||||
# directory is created here as the deploy user on purpose: rootless podman
|
||||
# would otherwise auto-create a missing bind source as root-owned, and the
|
||||
# container runs as uid 10000.
|
||||
mkdir -p /home/dank/voices
|
||||
|
||||
build_compose_image frank-tts
|
||||
install_quadlet frank-tts-engine dankclaw/voiceservice/quadlet frank-tts-engine
|
||||
install_quadlet frank-tts dankclaw/voiceservice/quadlet frank-tts
|
||||
systemctl --user start frank-tts-engine-network.service
|
||||
|
||||
# No `systemctl --user enable` (generated Quadlet units cannot be enabled on
|
||||
# this host); boot persistence is the [Install] section in each unit. The
|
||||
# façade unit carries Wants=/After= on frank-tts-engine.service, so this
|
||||
# restart pulls the engine — and its ExecStartPost warm pass — ahead of it:
|
||||
# an engine that will not start delays this gate instead of taking the
|
||||
# endpoint down with it.
|
||||
systemctl --user restart frank-tts.service
|
||||
# The gate is podman's recorded health, driven by the unit's own HealthCmd
|
||||
# (`wget --spider -q http://127.0.0.1:7772/health`, inside the container's
|
||||
# namespace). /health answers 200 with the backend name and the resolved
|
||||
# voice list, so an empty /voices still reads healthy while a dead app does
|
||||
# not — and note what this gate cannot see: the engine publishes no port on
|
||||
# purpose, so an engine that is down shows up in the /health payload and in
|
||||
# the first synthesis, never here.
|
||||
wait_container_healthy frank-tts 120
|
||||
}
|
||||
|
||||
deploy_comfyui() {
|
||||
# Build first: the unit's Image= resolves against local storage, so the
|
||||
# image has to exist before the generator starts a container from it.
|
||||
@@ -1748,6 +1793,7 @@ deploy_service() {
|
||||
frank-zealot) deploy_llm_zealot ;;
|
||||
frank-archon) deploy_llm_archon ;;
|
||||
frank-tts-engine) deploy_frank_tts_engine ;;
|
||||
frank-tts) deploy_frank_tts ;;
|
||||
hermes|hermes-dashboard|hermes-webui) deploy_hermes ;;
|
||||
romm|romm-mariadb|romm-redis|mariadb|redis) deploy_romm_stack "$service" ;;
|
||||
jellyfin) deploy_jellyfin ;;
|
||||
|
||||
+1
-1
@@ -142,7 +142,7 @@ valid_service() {
|
||||
dankclaw:node-exporter|dankclaw:authentik-postgres|dankclaw:authentik-server|\
|
||||
dankclaw:authentik-worker|dankclaw:authentik-outpost|dankclaw:authentik-outpost-ldap|dankclaw:anubis|dankclaw:seerr|\
|
||||
dankclaw:open-notebook|\
|
||||
dankclaw:frank-tts-engine|\
|
||||
dankclaw:frank-tts-engine|dankclaw:frank-tts|\
|
||||
dankclaw:frank-dragoon|dankclaw:frank-zealot|\
|
||||
dankserver:romm-mariadb|dankserver:romm-redis|dankserver:romm|\
|
||||
dankserver:copyparty|dankserver:jellyfin|dankserver:calibre-web|dankserver:calibre-server|dankserver:plex|dankserver:tautulli|\
|
||||
|
||||
+17
-8
@@ -30,21 +30,30 @@
|
||||
#
|
||||
# BACKEND SWITCH. TTS_BACKEND picks the shape and nothing else changes for the
|
||||
# consumer:
|
||||
# omni-http forward to an OpenAI-shaped upstream on the host (:8880),
|
||||
# carrying the voice along as base64 reference_audio. The
|
||||
# engine does the inference; the shim resolves the voice and
|
||||
# re-encodes to mp3 when asked.
|
||||
# omni-http forward to an OpenAI-shaped upstream, carrying the voice along
|
||||
# as base64 reference_audio. The engine does the inference; the
|
||||
# shim resolves the voice and re-encodes to mp3 when asked. The
|
||||
# shipped engine (frank-tts-engine) speaks a voice it has
|
||||
# REGISTERED on itself, from the same /home/dank/voices packs,
|
||||
# and warms them at boot — see [[Frank TTS Engine]] for why an
|
||||
# unwarmed voice costs the first caller 5.5 s.
|
||||
# llama-tts-cli run LLAMA_TTS_BIN once per request with
|
||||
# --tts-speaker-file <reference.wav>, nice 19 so a narration
|
||||
# never starves the text endpoints on this box. Needs
|
||||
# LLAMA_TTS_BIN + LLAMA_TTS_MODEL filled in; LLAMA_TTS_MMPROJ
|
||||
# only if that binary takes a projector.
|
||||
# The upstream address is host.containers.internal — the gateway name a bridge
|
||||
# container uses for the host. It is NOT the LAN IP and it is NOT
|
||||
# 127.0.0.1: a bridge netns has neither.
|
||||
|
||||
# THE UPSTREAM ADDRESS. The engine is a container on the private bridge this
|
||||
# unit also joins (dankclaw/voiceservice/quadlet/frank-tts-engine.network), so
|
||||
# this is its container DNS name. It used to read
|
||||
# `http://host.containers.internal:8880`, which is a shape that cannot work: a
|
||||
# bridge container reaches the host's network namespace, netavark DNATs PUBLISHED
|
||||
# ports only, and an engine on the host's loopback is published to nobody
|
||||
# ([[Container Network Namespaces]] — the trap that 502'd hermes). Inert under
|
||||
# TTS_BACKEND=llama-tts-cli, which needs no upstream at all.
|
||||
VOICES_DIR=/voices
|
||||
TTS_BACKEND=omni-http
|
||||
TTS_UPSTREAM=http://host.containers.internal:8880
|
||||
TTS_UPSTREAM=http://frank-tts-engine:8880
|
||||
TTS_UPSTREAM_MODEL=voxcpm2
|
||||
|
||||
# CLI-backend knobs, inert while TTS_BACKEND=omni-http. Empty means "not
|
||||
|
||||
Reference in New Issue
Block a user