Jake
ff7212ab9e
Match the live volundr unit: drop StateDirectory=/var/lib/bike_admin in favour of ReadWritePaths=/opt/bike_admin/data. systemd requires the ReadWritePaths target to exist before the service starts, so the unit documents the one-time install -d prerequisite.
26 lines
1.3 KiB
Plaintext
26 lines
1.3 KiB
Plaintext
# bike_admin production environment (copied to /opt/bike_admin/.env on the server)
|
|
# All values are BIKE_ADMIN_-prefixed. This file is NOT committed (see .gitignore).
|
|
|
|
# --- Required -------------------------------------------------
|
|
BIKE_ADMIN_USERNAME=jake
|
|
BIKE_ADMIN_PASSWORD=change-me-to-something-strong
|
|
|
|
# --- Required in production -----------------------------------
|
|
# Secret used to derive the CSRF / session tokens. Generate with:
|
|
# python3 -c "import secrets;print(secrets.token_urlsafe(32))"
|
|
BIKE_ADMIN_SECRET_KEY=
|
|
|
|
# Adds the Secure flag to the session cookie (we're served over HTTPS via Caddy).
|
|
BIKE_ADMIN_IS_PRODUCTION=true
|
|
|
|
# Bind to all interfaces so the hermodr reverse proxy (on another host) can reach it.
|
|
# The app trusts X-Forwarded-* headers from the proxy (BIKE_ADMIN_TRUST_PROXY defaults true).
|
|
BIKE_ADMIN_BIND_HOST=0.0.0.0
|
|
BIKE_ADMIN_BIND_PORT=8000
|
|
|
|
# --- Optional fine-tuning (defaults shown) ---------------------
|
|
# BIKE_ADMIN_SERVICE_DUE_SOON_MILES=200 # service "book soon" lead time
|
|
# BIKE_ADMIN_RENEWAL_DUE_SOON_DAYS=60 # MOT/insurance "due soon" lead time
|
|
# BIKE_ADMIN_RENEWAL_MONTHS=12 # MOT/insurance validity (months)
|
|
# BIKE_ADMIN_DATA_DIR=/opt/bike_admin/data # (defaults to <WorkingDirectory>/data; matches the systemd unit)
|