tben
459eebf73d
TLS no longer depends on NODE_ENV: the TLS_* variables win, else certs/ is used whenever it exists (the container's /app/certs mount lands there too), and TLS_DISABLED=1 is the only way to serve plain HTTP with a certificate present. The plain-HTTP redirect listener now starts whenever TLS is on, not only in development, and HTTP_REDIRECT_PORT replaces DEV_HTTP_PORT. The installer writes TLS_DISABLED=1 for --no-https, and the health check follows the same rule.
41 lines
1.1 KiB
Bash
41 lines
1.1 KiB
Bash
# Development settings. The installer writes its own .env; see README.md.
|
|
|
|
PORT=7227
|
|
|
|
GOOGLE_CLIENT_ID=
|
|
GOOGLE_CLIENT_SECRET=
|
|
|
|
# SMTP host, user and password
|
|
EMAIL_DOMAIN=
|
|
EMAIL_USER=
|
|
EMAIL_PASS=
|
|
# Receives contact form submissions
|
|
CONTACT_EMAIL_RECIPIENT=
|
|
# Outside production, ALL outgoing mail is redirected here (leave empty to skip sending)
|
|
DEV_EMAIL_RECIPIENT=
|
|
|
|
ENCRYPTION_KEY=
|
|
ENCRYPTION_SALT=
|
|
|
|
# HTTPS (see README). Generate files with `bun run gen:certs`; when these
|
|
# are empty the server uses certs/ if it exists, in every environment. Set
|
|
# TLS_DISABLED=1 to serve plain HTTP even when a certificate is there.
|
|
TLS_CERT_FILE=
|
|
TLS_KEY_FILE=
|
|
TLS_CA_FILE=
|
|
TLS_DISABLED=
|
|
# Plain-HTTP port that redirects to the HTTPS one (default PORT + 1).
|
|
HTTP_REDIRECT_PORT=
|
|
|
|
# Web Push: generated into Settings > Environment on first start. Set a
|
|
# fixed pair here only if you want to keep one across installs.
|
|
VAPID_PUBLIC_KEY=
|
|
VAPID_PRIVATE_KEY=
|
|
|
|
# Seed script overrides (bun run seed)
|
|
SEED_SUPER_ADMIN_EMAIL=
|
|
SEED_SUPER_ADMIN_USERNAME=
|
|
SEED_SUPER_ADMIN_FIRST_NAME=
|
|
SEED_SUPER_ADMIN_LAST_NAME=
|
|
SEED_SUPER_ADMIN_PASSWORD=
|