47 lines
1.8 KiB
Bash
47 lines
1.8 KiB
Bash
|
# =============================================================================
|
|||
|
|
# Serienbrief – Environment
|
|||
|
|
# Kopieren als .env. NICHT ins Git committen.
|
|||
|
|
# =============================================================================
|
|||
|
|
|
|||
|
|
# --- Deployment -------------------------------------------------------------
|
|||
|
|
APP_VERSION=1.0.0
|
|||
|
|
APP_UID=10001
|
|||
|
|
APP_GID=10001
|
|||
|
|
|
|||
|
|
# Bind des internen Nginx-Sockets. Wird vom äußeren Reverse-Proxy angesprochen.
|
|||
|
|
# - 127.0.0.1: nur lokal (z.B. wenn der äußere Proxy auf demselben Host läuft)
|
|||
|
|
# - LAN-IP: wenn der äußere Proxy auf einem anderen Host steht
|
|||
|
|
APP_BIND_IP=127.0.0.1
|
|||
|
|
APP_BIND_PORT=8080
|
|||
|
|
|
|||
|
|
# --- Django -----------------------------------------------------------------
|
|||
|
|
# openssl rand -base64 64
|
|||
|
|
DJANGO_SECRET_KEY=CHANGE_ME_LONG_RANDOM_STRING
|
|||
|
|
DJANGO_DEBUG=False
|
|||
|
|
|
|||
|
|
# Hosts, unter denen die App erreichbar ist (Domain des äußeren Proxys).
|
|||
|
|
DJANGO_ALLOWED_HOSTS=serienbrief.lan,127.0.0.1,localhost
|
|||
|
|
|
|||
|
|
# Trusted Origins für CSRF – HTTPS-URL des äußeren Proxys.
|
|||
|
|
CSRF_TRUSTED_ORIGINS=https://serienbrief.lan
|
|||
|
|
|
|||
|
|
# Wichtig hinter HTTPS-terminierendem Proxy: erlaubt Django, das Schema aus
|
|||
|
|
# dem X-Forwarded-Proto-Header zu übernehmen.
|
|||
|
|
USE_X_FORWARDED_HOST=True
|
|||
|
|
SECURE_PROXY_SSL_HEADER=HTTP_X_FORWARDED_PROTO,https
|
|||
|
|
|
|||
|
|
# --- PostgreSQL -------------------------------------------------------------
|
|||
|
|
POSTGRES_DB=serienbrief
|
|||
|
|
POSTGRES_USER=serienbrief
|
|||
|
|
# Passwort liegt in ./secrets/postgres_password.txt
|
|||
|
|
DATABASE_URL=postgres://serienbrief:__FROM_SECRET__@db:5432/serienbrief
|
|||
|
|
|
|||
|
|
# --- Redis ------------------------------------------------------------------
|
|||
|
|
# openssl rand -base64 32
|
|||
|
|
REDIS_PASSWORD=CHANGE_ME_REDIS_PASSWORD
|
|||
|
|
CELERY_BROKER_URL=redis://:${REDIS_PASSWORD}@redis:6379/0
|
|||
|
|
CELERY_RESULT_BACKEND=redis://:${REDIS_PASSWORD}@redis:6379/1
|
|||
|
|
|
|||
|
|
# --- Retention --------------------------------------------------------------
|
|||
|
|
JOB_RETENTION_DAYS=30
|