ginnoir
441e1ee272
Portainer git-stack deploys require stack.env (not .env) in the repo. Renames all stacks/*/. env → stacks/*/stack.env so Portainer reads secrets directly from git on each redeploy, making the repo the single source of truth instead of requiring manual UI sync. Also fixes the dev stack BOOKSTACK_APP_KEY gap — the key was already present in the file but missing from Portainer's stored envVars; it will now be picked up automatically from stack.env on next redeploy. Updates CLAUDE.md to reflect the new filename convention.
34 lines
1.4 KiB
Bash
34 lines
1.4 KiB
Bash
# famapp stack secrets
|
|
FAMAPP_IMAGE=ghcr.io/ginnoir/famapp:latest
|
|
FAMAPP_PULL_POLICY=always
|
|
RUN_MIGRATIONS=true
|
|
LOG_LEVEL=info
|
|
|
|
AUTH_URL=https://fam.ginnoir.com
|
|
FAMAPP_DB_USER=famapp
|
|
FAMAPP_DB_PASSWORD=a9a999d16dd5cdc521bb62eff331265d3c24
|
|
FAMAPP_DB_NAME=famapp
|
|
|
|
# famapp Auth.js session secret (mapped to the container's AUTH_SECRET)
|
|
FAMAPP_AUTH_SECRET=CJsICgBs78YxxSdJfS8KU9Zn9k+QytRoVui9kVtuHtI=
|
|
|
|
# OIDC via Authentik (public URL through Caddy — no container dependency)
|
|
AUTH_OIDC_ISSUER=https://auth.ginnoir.com/application/o/famapp/
|
|
AUTH_OIDC_CLIENT_ID=6uOZ8yjTR9Z2m1RZU1cLHYXHV2Lv6zZtfuJcrsdq
|
|
AUTH_OIDC_CLIENT_SECRET=CPcNM8jXaJ2jHFKxRwGuuKyMKJsT502l3FztO1AOcFqDzWqlWu5x7Ox52Q6zyBa2v33YzoA9igrXW8FFjd1Gp7wrZV4PGTwvXmOd7pIMOY93gNotAgJaewT8WHW1F3YD
|
|
|
|
VAPID_PUBLIC_KEY=BNED_UgfPhyoG6_JOabhpQpN3nr6QM5tO0PDiAadMGCcZROn8LM7tnsBrKaB1E5kfuDFb1rC_M86cT3uCvBqSBk
|
|
VAPID_PRIVATE_KEY=QyJiyCI2TJa_QWVXznfj4vjpWTBsyFfSCtn1brpE9aI
|
|
VAPID_SUBJECT=mailto:3nigma.matt@gmail.com
|
|
|
|
NTFY_URL=https://ntfy.ginnoir.com
|
|
NTFY_TOPIC=famapp
|
|
|
|
# MinIO object storage (plant/container image uploads)
|
|
famapp_MINIO_ROOT_USER=famapp
|
|
famapp_MINIO_ROOT_PASSWORD=d0fet0th3x
|
|
famapp_MINIO_BUCKET=garden
|
|
|
|
famapp_OPENPLANTBOOK_CLIENT_ID=5JdQLab69RhVaF4er7b7D29BCrkf3fo3OEiDsOQa
|
|
famapp_OPENPLANTBOOK_CLIENT_SECRET=kxPTrdQPAVta7sjVuIRf5EGIJ1fKvlMlqRSJpQtFxRftJhg7oeGnXzwH7ls6tluQLFUYVDYRMwISiAuKZGZLvkuJzUwFGCwhZw7UtW8OvcTGy4717WeNUinvuCDSsNXP
|