ginnoirandClaude Sonnet 4.6
f59753404e
Multi-stage Dockerfile (pnpm fetch/offline, standalone output, non-root nextjs user), deploy/compose.yaml with famapp + famapp-db + full Authentik stack on famapp_net, Caddyfile.snippet for fam/auth.ginnoir.com, and .env.production.example. Added .dockerignore and public/.gitkeep. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
41 lines
1.6 KiB
Bash
41 lines
1.6 KiB
Bash
# ── famapp ────────────────────────────────────────────────────────────────────
|
|
|
|
# Public URL for the app (used in share links, OIDC redirect URIs, etc.)
|
|
NEXT_PUBLIC_APP_URL=https://fam.ginnoir.com
|
|
|
|
# famapp Postgres credentials (used to build DATABASE_URL inside compose.yaml)
|
|
FAMAPP_DB_USER=famapp
|
|
FAMAPP_DB_PASSWORD=replace-with-strong-password
|
|
FAMAPP_DB_NAME=famapp
|
|
|
|
# Auth.js session secret — generate with: openssl rand -base64 32
|
|
AUTH_SECRET=replace-with-openssl-rand-base64-32
|
|
|
|
# OIDC provider (Authentik) — task 06 will fill these in after bootstrapping
|
|
AUTH_OIDC_ISSUER=https://auth.ginnoir.com/application/o/famapp/
|
|
AUTH_OIDC_CLIENT_ID=replace-me
|
|
AUTH_OIDC_CLIENT_SECRET=replace-me
|
|
|
|
# Web Push VAPID keys — generate with: pnpm vapid:generate
|
|
VAPID_PUBLIC_KEY=
|
|
VAPID_PRIVATE_KEY=
|
|
# Must be "mailto:<address>" or a URL
|
|
VAPID_SUBJECT=mailto:you@example.com
|
|
|
|
# ntfy (optional push fallback — leave blank to disable)
|
|
NTFY_URL=
|
|
NTFY_TOPIC=
|
|
|
|
# Log level: error | warn | info | debug
|
|
LOG_LEVEL=info
|
|
|
|
# ── Authentik ─────────────────────────────────────────────────────────────────
|
|
|
|
# Authentik Postgres credentials (separate DB per Matt's rule)
|
|
AUTHENTIK_DB_USER=authentik
|
|
AUTHENTIK_DB_PASSWORD=replace-with-strong-password
|
|
AUTHENTIK_DB_NAME=authentik
|
|
|
|
# Authentik secret key — generate with: openssl rand -base64 60
|
|
AUTHENTIK_SECRET_KEY=replace-with-openssl-rand-base64-60
|