|
# Copy to .env and adjust. Loaded by docker-compose (env_file) and by the app
|
|
# at startup (python-dotenv). .env is git-ignored; this example is committed.
|
|
|
|
# Session signing key. CHANGE THIS for any real deployment.
|
|
SECRET_KEY=change-me
|
|
|
|
# Database. Leave unset to use the shared data/devplace.db (the Docker app
|
|
# container bind-mounts ./ to /app, so it reads and writes the same file as
|
|
# `make dev`). Set only to point at a different SQLite file.
|
|
# DEVPLACE_DATABASE_URL=sqlite:////app/data/devplace.db
|
|
|
|
# Single root for ALL runtime data (DB, uploads, VAPID keys, locks, bot state,
|
|
# zip/fork staging, container workspaces). Lives OUTSIDE the package and is never
|
|
# served via /static. Defaults to <repo>/data. The docker daemon must be able to
|
|
# bind-mount this dir for container /app mounts; point it at a persistent volume
|
|
# in production. nginx also reads <DEVPLACE_DATA_DIR>/uploads to serve uploads.
|
|
# DEVPLACE_DATA_DIR=/var/lib/devplace
|
|
|
|
# Container Manager (admin-only, enabled via docker-compose.containers.yml).
|
|
# Host the /p/<slug> ingress proxy dials to reach a published container port.
|
|
# On the host: 127.0.0.1 (default). Containerized app reaching host ports:
|
|
# host.docker.internal.
|
|
# DEVPLACE_CONTAINER_PROXY_HOST=host.docker.internal
|
|
# GID of /var/run/docker.sock on the host (getent group docker | cut -d: -f3),
|
|
# so the UID-1000 app can use the socket.
|
|
# DOCKER_GID=999
|
|
|
|
# Public origin for absolute URLs (SEO, canonical links, push). Empty = derive
|
|
# from the request.
|
|
DEVPLACE_SITE_URL=
|
|
|
|
# Host port the nginx front door binds.
|
|
PORT=10500
|
|
|
|
# nginx upload ceiling. Must be >= the admin-configurable max_upload_size_mb.
|
|
NGINX_MAX_BODY_SIZE=50m
|
|
|
|
# Optional nginx micro-cache for proxied GETs.
|
|
NGINX_CACHE_ENABLED=false
|
|
NGINX_CACHE_MAX_SIZE=1g
|
|
|
|
# Run the app container as this host user so shared files keep dev ownership.
|
|
DEVPLACE_UID=1000
|
|
DEVPLACE_GID=1000
|
|
|
|
# DevTunnel (SSH reverse tunneling)
|
|
# SSH server port for *.tunnel.devplace.net
|
|
# DEVPLACE_TUNNEL_SSH_PORT=4242
|
|
# Path to SSH host key (auto-generated if missing)
|
|
# DEVPLACE_TUNNEL_SSH_HOST_KEY=
|
|
# Auth API URL that the SSH server calls to validate credentials
|
|
# DEVPLACE_TUNNEL_AUTH_API_URL=http://app:10500/api/tunnel/auth-check
|
|
# Maximum concurrent tunnels per user
|
|
# DEVPLACE_TUNNEL_RATE_LIMIT_PER_USER=5
|
|
# Maximum bytes out per tunnel (10MB default; 0 = unlimited)
|
|
# DEVPLACE_TUNNEL_MAX_BANDWIDTH_PER_CLIENT=10485760
|
|
# Auth cache TTL in seconds
|
|
# DEVPLACE_TUNNEL_AUTH_CACHE_TTL=300
|
|
# Remote port range for tunnel allocation
|
|
# DEVPLACE_TUNNEL_MIN_PORT=40000
|
|
# DEVPLACE_TUNNEL_MAX_PORT=49999
|
|
# Tunnel domain
|
|
# DEVPLACE_TUNNEL_DOMAIN=tunnel.devplace.net
|
|
# Directory for nginx tunnel snippets (mounted volume between nginx and ssh-server)
|
|
# DEVPLACE_TUNNEL_NGINX_TUNNEL_DIR=
|