34 lines
1.5 KiB
Shell
34 lines
1.5 KiB
Shell
# Host-specific values, interpolated into every stack's compose file. Not secret.
|
|
# A test machine commits its own copy of this file to its own bare repo; nothing else differs.
|
|
|
|
# Bare repositories on the host, pushed to over SSH (ubuntu@185.143.103.191:/srv/git/<name>.git).
|
|
GIT_ROOT=/srv/git
|
|
# uid:gid owning GIT_ROOT (gitore refuses repositories it does not own).
|
|
GIT_UID=1000:1000
|
|
|
|
# Let's Encrypt account e-mail, and the issuer: `acme` in production, `internal` on a test machine
|
|
# whose names have no public DNS (Caddy then signs with its own local CA).
|
|
ACME_EMAIL=juliette.elias@bureaudouble.com
|
|
CERT_ISSUER=acme
|
|
|
|
|
|
# Hypercomics (HEAD), static sites moved from nginx: <domain>, app.<domain>, text.<domain>.
|
|
HYPERCOMICS_DOMAIN=hypercomics.org
|
|
WWW_ROOT=/var/www
|
|
|
|
# Forgejo, the forge (replaces gitore). Account and repositories declared here, password in forgejo/fnox.toml.
|
|
FORGEJO_DOMAIN=git.fuckingtech.ch
|
|
FORGEJO_ADMIN_USER=elias
|
|
FORGEJO_ADMIN_EMAIL=juliette.elias@bureaudouble.com
|
|
# Owner of the repositories; FORGEJO_ADMIN_USER is the account that signs in and owns the org.
|
|
FORGEJO_ORG=headpoolnumerique
|
|
FORGEJO_REPOS="head-vps storytellurx storytellurx-v1 fuckingtech"
|
|
# Readable by anyone (secrets in them are age-encrypted, see each fnox.toml); only the admin writes.
|
|
FORGEJO_REPOS_PRIVATE=false
|
|
|
|
# RustFS, the S3 of every app: API (credentials required) and public media (read-only).
|
|
S3_DOMAIN=s3.fuckingtech.ch
|
|
ASSETS_DOMAIN=assets.fuckingtech.ch
|
|
|
|
# Image transformer of every app.
|
|
SHARP_DOMAIN=sharp.fuckingtech.ch
|