Jeppe Bundgaard
2aded0812a
- Add tests for shell bridge to validate structured error reporting on spawn failures. - Add broker tests to ensure proper rejection of malformed browser shell upgrades without leaking sensitive tokens. - Update `.env.example` with `EDGE_PUBLIC_BROKER_URL` for public access configuration.
68 lines
2.2 KiB
Bash
68 lines
2.2 KiB
Bash
## Environment overrides for docker-compose
|
|
|
|
# Path to the host's Let's Encrypt directory that contains live/<domain>/ certs.
|
|
# This directory is bind-mounted into the Nginx container at /etc/letsencrypt.
|
|
|
|
# Linux hosts (default)
|
|
LETSENCRYPT_PATH=/etc/letsencrypt
|
|
|
|
# Windows (Docker Desktop with WSL Ubuntu). Uncomment and adjust distro name if different.
|
|
# LETSENCRYPT_PATH=//wsl$/Ubuntu/etc/letsencrypt
|
|
|
|
# Notes:
|
|
# - Ensure the following files exist under the path you set:
|
|
# live/api.truckwash.dk/fullchain.pem
|
|
# live/api.truckwash.dk/privkey.pem
|
|
# live/cloud.truckwash.dk/fullchain.pem
|
|
# live/cloud.truckwash.dk/privkey.pem
|
|
# - If you do not have certs for cloud.truckwash.dk locally, either comment out that
|
|
# TLS server block in services/nginx/nginx.conf or place a temporary self-signed
|
|
# cert/key pair at the expected path.
|
|
|
|
# Database target selection used by services/nginx/app/config.php
|
|
# Allowed values: live, debug
|
|
CONFIG_DB_TARGET=live
|
|
|
|
# Live DB credentials
|
|
CONFIG_DB_HOST=
|
|
CONFIG_DB_USER=
|
|
CONFIG_DB_PASSWORD=
|
|
CONFIG_DB_DATABASE=
|
|
CONFIG_DB_PORT=3306
|
|
CONFIG_DB_SSL_MODE=DISABLED
|
|
|
|
# Debug DB credentials (used when CONFIG_DB_TARGET=debug)
|
|
# Any blank debug value falls back to the live value above.
|
|
CONFIG_DB_DEBUG_HOST=mysql-debug
|
|
CONFIG_DB_DEBUG_USER=root
|
|
CONFIG_DB_DEBUG_PASSWORD=debug_root_password
|
|
CONFIG_DB_DEBUG_DATABASE=nnks_db_debug
|
|
CONFIG_DB_DEBUG_PORT=3306
|
|
CONFIG_DB_DEBUG_SSL_MODE=DISABLED
|
|
|
|
# e-conomic credentials
|
|
# Required: ECONOMIC_API_APP_ACCESS_GRANT and ECONOMIC_API_APP_SECRET_TOKEN
|
|
# Optional-but-recommended: ECONOMIC_API_APP_ACCESS_GRANT2 (falls back to primary grant when blank)
|
|
ECONOMIC_API_APP_ACCESS_GRANT=
|
|
ECONOMIC_API_APP_ACCESS_GRANT2=
|
|
ECONOMIC_API_APP_SECRET_TOKEN=
|
|
|
|
# Edge broker defaults for shell relay and gateway dispatch.
|
|
EDGE_BROKER_URL=http://edge-broker:4300
|
|
EDGE_PUBLIC_BROKER_URL=http://localhost/api/edge-broker
|
|
EDGE_BROKER_SHARED_SECRET=truckwash-edge-dev
|
|
|
|
# Redis credentials
|
|
REDIS_CONFIG_HOST=redis
|
|
REDIS_CONFIG_DATABASE=0
|
|
REDIS_CONFIG_PASSWORD=
|
|
REDIS_CONFIG_PORT=6379
|
|
REDIS_CONFIG_USER=default
|
|
|
|
# Redis debug credentials
|
|
REDIS_CONFIG_DEBUG_HOST=redis
|
|
REDIS_CONFIG_DEBUG_DATABASE=0
|
|
REDIS_CONFIG_DEBUG_PASSWORD=
|
|
REDIS_CONFIG_DEBUG_PORT=6379
|
|
REDIS_CONFIG_DEBUG_USER=default
|