tben
e859bab294
The installer generates a CA and a 397-day certificate into $COBBLE_HOME/certs (in the app image, with the host's addresses), mounts the certificate, key and CA into the container and serves TLS from Bun on the published port. --no-https opts out; --https-cert/--https-key use a real certificate, --https-host adds names and --https-regen replaces the CA. The installer and the image health check use curl -k when TLS is on. The CA is served at /ca.crt and as an iOS/macOS profile at /ca.mobileconfig for one-tap install. Development picks up certs/ automatically, `bun run dev:phone` generates and starts, and a plain-HTTP listener on PORT + 1 redirects to HTTPS. Port sharing is off, so a stale dev server fails instead of silently answering on the same port.
40 lines
1.1 KiB
Bash
40 lines
1.1 KiB
Bash
# Development settings. The installer writes its own .env; see README.md.
|
|
|
|
PORT=7227
|
|
|
|
GOOGLE_CLIENT_ID=
|
|
GOOGLE_CLIENT_SECRET=
|
|
|
|
# SMTP host, user and password
|
|
EMAIL_DOMAIN=
|
|
EMAIL_USER=
|
|
EMAIL_PASS=
|
|
# Receives contact form submissions
|
|
CONTACT_EMAIL_RECIPIENT=
|
|
# Outside production, ALL outgoing mail is redirected here (leave empty to skip sending)
|
|
DEV_EMAIL_RECIPIENT=
|
|
|
|
ENCRYPTION_KEY=
|
|
ENCRYPTION_SALT=
|
|
|
|
# HTTPS (optional in development; see README). Generate files with
|
|
# `bun run gen:certs` and point these at them. The installer sets them on a
|
|
# real install. Leave all three empty to serve plain HTTP.
|
|
TLS_CERT_FILE=
|
|
TLS_KEY_FILE=
|
|
TLS_CA_FILE=
|
|
# Plain-HTTP port that redirects to the HTTPS one (default PORT + 1).
|
|
DEV_HTTP_PORT=
|
|
|
|
# Web Push: generated into Settings > Environment on first start. Set a
|
|
# fixed pair here only if you want to keep one across installs.
|
|
VAPID_PUBLIC_KEY=
|
|
VAPID_PRIVATE_KEY=
|
|
|
|
# Seed script overrides (bun run seed)
|
|
SEED_SUPER_ADMIN_EMAIL=
|
|
SEED_SUPER_ADMIN_USERNAME=
|
|
SEED_SUPER_ADMIN_FIRST_NAME=
|
|
SEED_SUPER_ADMIN_LAST_NAME=
|
|
SEED_SUPER_ADMIN_PASSWORD=
|