dab37a88e8
- Remove env_file references from docker-compose.yml and docker-compose.prod.yml - Add explicit environment variable forwarding for all services - Use TRAEFIK_NETWORK env var in docker-compose.traefik.yml instead of hardcoded name - Add VITE_* frontend variables to .env.example and deploy/.env.example - Add missing production variables (TRAEFIK_ENTRYPOINT, TRAEFIK_CERT_RESOLVER) to deploy/.env.example This makes environment configuration more explicit and easier to manage across different deployment scenarios (local dev, CI/CD, Portainer).
36 lines
890 B
Bash
36 lines
890 B
Bash
# Production Environment Variables
|
|
# Copy to .env and fill in all values
|
|
|
|
# Domain Configuration
|
|
ROOT_DOMAIN=example.com
|
|
ACME_EMAIL=admin@example.com
|
|
|
|
# Database
|
|
POSTGRES_USER=headquarter
|
|
POSTGRES_PASSWORD=change-me-in-production
|
|
POSTGRES_DB=headquarter
|
|
|
|
# Authentik OIDC
|
|
AUTHENTIK_ISSUER_URL=https://auth.example.com/application/o/headquarter/
|
|
AUTHENTIK_CLIENT_ID=headquarter-api
|
|
AUTHENTIK_CLIENT_SECRET=change-me-in-production
|
|
|
|
# API Configuration
|
|
SECRET_ENCRYPTION_KEY=change-me-in-production
|
|
ACCESS_TOKEN_EXPIRE_MINUTES=60
|
|
|
|
# Deployment
|
|
TRAEFIK_NETWORK=traefik
|
|
TRAEFIK_LOG_LEVEL=INFO
|
|
TRAEFIK_ENTRYPOINT=websecure
|
|
TRAEFIK_CERT_RESOLVER=letsencrypt
|
|
API_TAG=latest
|
|
WEB_TAG=latest
|
|
REGISTRY=ghcr.io
|
|
REPO=headquarter
|
|
|
|
# Frontend build-time variables
|
|
VITE_API_URL=https://api.example.com
|
|
VITE_OIDC_ISSUER=https://auth.example.com/application/o/headquarter/
|
|
VITE_OIDC_CLIENT_ID=headquarter-web
|