viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

broker-sync: drop IBKR_ACCOUNT_ID env (now derived via ensure_account)

Browse source
This commit is contained in:
Viktor Barzin 2026-05-27 09:25:02 +00:00
parent 6d13ba12da
commit 17c59a280b
1 changed files with 9 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

17
stacks/broker-sync/main.tf
View file

@ -421,14 +421,15 @@ resource "kubernetes_cron_job_v1" "imap" {
name = "BROKER_SYNC_DATA_DIR"
value = "/data"
}
# 2026-05-26: skip InvestEngine email parsing. IE has its own
# bearer-token API path (`broker-sync invest-engine`) — running
# both produces duplicate BUYs in Wealthfolio because the two
# generate different external_ids for the same fill.
env {
name = "BROKER_SYNC_IMAP_EXCLUDE_PROVIDERS"
value = "invest-engine"
}
# IE email parsing IS enabled (2026-05-27). The bearer-token CLI
# path (`broker-sync invest-engine`) is not wired as a CronJob
# — token expires ~monthly, MFA blocks scripted refresh, and
# the `/api/v0.3X/` version probe drifts every 4-6 weeks. Email
# confirmations land on every fill anyway, so we standardise on
# IMAP as the single canonical path for IE (parity with Schwab).
# If the bearer CLI is ever run manually, dedup is at WF level
# (external_id) so a re-run is safe; just expect the IMAP store
# not to know about those rows.
env {
name = "WF_SESSION_PATH"
value = "/data/wealthfolio_session.json"