fixes and improvements
This commit is contained in:
@@ -84,20 +84,19 @@ export VITE_OIDC_CLIENT_ID=manage
|
||||
export VITE_OIDC_REDIRECT_URI=https://manage.example.com/
|
||||
export VITE_OIDC_POST_LOGOUT_REDIRECT_URI=https://manage.example.com/
|
||||
|
||||
# Optional: provide a single SSH private key file for remote machines configured later in Settings.
|
||||
# Compose mounts it as a Docker secret, so you do not need to mount your whole ~/.ssh directory.
|
||||
# If you prefer SSH agent forwarding, Paramiko will use SSH_AUTH_SOCK when you provide it.
|
||||
export SSH_KEY_HOST_PATH=$HOME/.ssh/id_ed25519
|
||||
# The container-side secret path is fixed at /run/secrets/ssh_private_key.
|
||||
# In the app's SSH machine settings, use /run/secrets as the key directory and ssh_private_key as the key name.
|
||||
|
||||
docker compose up --build
|
||||
```
|
||||
|
||||
Inline one-liner example:
|
||||
|
||||
```bash
|
||||
BACKEND_APP_HOST=manage.example.com FRONTEND_APP_HOST=manage.example.com CERT_RESOLVER=letsencrypt VITE_OIDC_ISSUER=https://authentik.example/application/o/manage/ VITE_OIDC_CLIENT_ID=manage VITE_OIDC_REDIRECT_URI=https://manage.example.com/ VITE_OIDC_POST_LOGOUT_REDIRECT_URI=https://manage.example.com/ SSH_KEY_HOST_PATH=$HOME/.ssh/id_ed25519 docker compose up --build
|
||||
BACKEND_APP_HOST=manage.example.com FRONTEND_APP_HOST=manage.example.com CERT_RESOLVER=letsencrypt VITE_OIDC_ISSUER=https://authentik.example/application/o/manage/ VITE_OIDC_CLIENT_ID=manage VITE_OIDC_REDIRECT_URI=https://manage.example.com/ VITE_OIDC_POST_LOGOUT_REDIRECT_URI=https://manage.example.com/ docker compose up --build
|
||||
```
|
||||
|
||||
For local development, no SSH key is required unless you want to connect to remote SSH machines later:
|
||||
|
||||
```bash
|
||||
docker compose -f docker-compose.dev.yml up --build
|
||||
```
|
||||
|
||||
Example environment variables:
|
||||
@@ -120,9 +119,8 @@ SMTP_TIMEOUT=30
|
||||
# Jellyfin, Jellyseerr, and SSH targets are now configured per machine in the app's Settings tab.
|
||||
# The backend seeds a local machine automatically, so no global Jellyfin or SSH env vars are required.
|
||||
#
|
||||
# If you still want to keep a fallback SSH key available for legacy/manual use, provide a single key file path:
|
||||
SSH_KEY_HOST_PATH=/absolute/path/to/id_ed25519
|
||||
# The container-side secret path is fixed at /run/secrets/ssh_private_key.
|
||||
# Remote SSH machines can store their private key and optional passphrase directly in Settings,
|
||||
# so no SSH key mount is required for normal use.
|
||||
|
||||
# Authentik / OIDC
|
||||
AUTH_ENABLED=true
|
||||
|
||||
Reference in New Issue
Block a user