Rogeeandrogee
7a9fec33c5
* HH-439: harden production artifact pipeline * fix(HH-439): address production compose review * fix(HH-439): preserve previous JWT secrets in production --------- Co-authored-by: Rogee <rogee@ipao.vip>
29 lines
1.3 KiB
Bash
29 lines
1.3 KiB
Bash
# GoChat production variables. Copy to .env and replace every CHANGE_ME value.
|
|
|
|
GOCHAT_IMAGE_REF=ghcr.io/rogeecn/gochat@sha256:CHANGE_ME
|
|
GOCHAT_ENV=production
|
|
GOCHAT_PORT=3000
|
|
GOCHAT_SERVER_MODE=release
|
|
GOCHAT_SERVER_CORS_ALLOWED_ORIGINS=https://chat.CHANGE_ME.example.com
|
|
|
|
POSTGRES_DB=gochat_production
|
|
POSTGRES_USER=gochat
|
|
POSTGRES_PASSWORD=CHANGE_ME
|
|
# The built-in PostgreSQL service is non-TLS. For an external database, set a
|
|
# complete GOCHAT_DATABASE_DSN with sslmode=require, verify-ca, or verify-full.
|
|
|
|
POSTGRES_IMAGE_REF=pgvector/pgvector:pg16@sha256:ccc6e83d6e35e931dc7c5def2022729d5a6c370318d099181995567ff1fb4d6b
|
|
REDIS_IMAGE_REF=redis:7-alpine@sha256:ff02b58f971e7d7d156a1267e283fcbbeee91773b6aa36c49dac28ecfe28eadf
|
|
MEILI_IMAGE_REF=getmeili/meilisearch:v1.13@sha256:bed3fb650e62da53145777204891159242f6ea4ce69e215b36223af4aa64a0ae
|
|
|
|
REDIS_PASSWORD=CHANGE_ME
|
|
MEILI_MASTER_KEY=CHANGE_ME
|
|
GOCHAT_JWT_SECRET=CHANGE_ME_WITH_AT_LEAST_32_RANDOM_CHARACTERS
|
|
# Optional during a bounded rotation window; comma-separated old 32+ byte secrets.
|
|
GOCHAT_JWT_PREVIOUS_SECRETS=
|
|
GOCHAT_JWT_ALLOW_INSECURE_HEADER_AUTH=false
|
|
|
|
# Optional connector. Supply the digest published by its release pipeline.
|
|
SHANGWUTONG_IMAGE_REF=ghcr.io/rogeecn/shangwutong@sha256:CHANGE_ME
|
|
GOCHAT_CONNECTOR_SERVICE_TOKEN=
|