Developer
c9c72be0b6
PR 4a of the runtime service registry change. - Remove addon pages (/addons/:addonId, AddonPage, addons/*) superseded by service pages. - Remove grafana_url/prometheus_url from backend config, compose, .env.example, and README (URLs now live on service records; VITE_ frontend deep-link vars retained). - Add Services page (/services) with create/list/delete + sidebar nav, so services are configurable in the tool itself and service pages are reachable. - Update docs/REQUIREMENTS.md service-registry section; add CHANGELOG.md with the breaking-upgrade note (MANAGE_ENCRYPTION_KEY required; grafana/prometheus env vars removed; default widget seeding removed). Verification: backend ruff clean, pytest 222 passed; frontend lint 0 errors, build success, 70 tests passed.
76 lines
2.3 KiB
Bash
76 lines
2.3 KiB
Bash
# Manage environment template
|
|
# Copy this file to .env, fill in the required values, and export them in your shell
|
|
# before running docker compose. Compose files use interpolation, not env_file.
|
|
|
|
# App
|
|
APP_VERSION=0.1.0
|
|
APP_BUILD_INFO=dev
|
|
|
|
# Hosts
|
|
BACKEND_APP_HOST=api.manage.example.com
|
|
FRONTEND_APP_HOST=manage.example.com
|
|
GRAFANA_APP_HOST=grafana.example.com
|
|
BACKEND_APP_PORT=8000
|
|
FRONTEND_APP_PORT=80
|
|
GRAFANA_APP_PORT=3000
|
|
BACKEND_APP_NAME=manage-backend
|
|
FRONTEND_APP_NAME=manage-frontend
|
|
GRAFANA_APP_NAME=grafana
|
|
|
|
# Traefik / certificates
|
|
CERT_RESOLVER=letsencrypt
|
|
|
|
# Backend
|
|
LOG_LEVEL=INFO
|
|
LOG_FORMAT=json
|
|
PROMETHEUS_ENABLED=true
|
|
PROMETHEUS_FILE_SD_DIR=/app/backend/.cache/prometheus-file-sd
|
|
ALERTMANAGER_URL=http://alertmanager:9093
|
|
ALERTMANAGER_WEBHOOK_URL=
|
|
# Required: master key for encrypting service secrets (API keys/tokens) at rest.
|
|
# Generate one with: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
|
|
MANAGE_ENCRYPTION_KEY=replace-with-a-fernet-key
|
|
BACKEND_CACHE_DIR=./backend-cache
|
|
|
|
# Auth
|
|
AUTH_ENABLED=true
|
|
OIDC_ISSUER_URL=https://auth.example.com/application/o/manage/
|
|
OIDC_AUDIENCE=manage
|
|
OIDC_JWKS_URL=https://auth.example.com/application/o/manage/jwks/
|
|
OIDC_CLOCK_SKEW_SECONDS=30
|
|
|
|
# Frontend OIDC
|
|
VITE_API_URL=/api
|
|
VITE_OIDC_ENABLED=true
|
|
VITE_OIDC_ISSUER=https://auth.example.com/application/o/manage/
|
|
VITE_OIDC_CLIENT_ID=manage
|
|
VITE_OIDC_SCOPE=openid profile email
|
|
VITE_OIDC_REDIRECT_URI=https://manage.example.com/oidc/callback
|
|
VITE_OIDC_POST_LOGOUT_REDIRECT_URI=https://manage.example.com/
|
|
VITE_DEV_API_PROXY_TARGET=http://backend:8000
|
|
VITE_GRAFANA_URL=https://grafana.example.com
|
|
VITE_PROMETHEUS_URL=https://prometheus.example.com
|
|
|
|
# SMTP
|
|
SMTP_HOST=smtp.example.com
|
|
SMTP_PORT=587
|
|
SMTP_USERNAME=
|
|
SMTP_PASSWORD=
|
|
SMTP_FROM_ADDRESS=no-reply@example.com
|
|
SMTP_FROM_NAME=Manage
|
|
SMTP_USE_TLS=true
|
|
SMTP_USE_SSL=false
|
|
SMTP_TIMEOUT=30
|
|
|
|
# Grafana admin / OAuth
|
|
GRAFANA_ADMIN_USER=admin
|
|
GRAFANA_ADMIN_PASSWORD=change-me
|
|
GF_AUTH_GENERIC_OAUTH_CLIENT_ID=manage
|
|
GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET=
|
|
GF_AUTH_GENERIC_OAUTH_AUTH_URL=https://auth.example.com/application/o/manage/authorize/
|
|
GF_AUTH_GENERIC_OAUTH_TOKEN_URL=https://auth.example.com/application/o/manage/token/
|
|
GF_AUTH_GENERIC_OAUTH_API_URL=https://auth.example.com/application/o/manage/userinfo/
|
|
|
|
# Alerting
|
|
ALERT_EMAIL_TO=admin@example.com
|