nak0x
18064be674
- Ajout scripts/ reproduisant chaque étape (secrets, render config, up CLI, init Garage, bootstrap prod, admin, vérif E2E, adoption Coolify, backup) - Templates envsubst (config.yml, garage.toml, cantaloupe.properties) + .example - deploy.conf (config non-secrète : domaine, versions, uuids Coolify) - docs/ : ARCHITECTURE, TROUBLESHOOTING (11 problèmes/fixes), RUNBOOK, SECURITY - Makefile (raccourcis) - .gitignore + retrait du suivi de .env/.secrets.env/config.yml/garage.toml (fichiers conservés sur disque ; secrets restent dans l'historique -> voir SECURITY.md) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
75 lines
1.5 KiB
Cheetah
75 lines
1.5 KiB
Cheetah
---
|
|
# Template de la configuration Arkindex. Rendu par scripts/01-render-config.sh (envsubst).
|
|
# Variables attendues : DOMAIN, SECRET_KEY, PG_PASS, GK_ID, GK_SECRET.
|
|
# IMPORTANT : les services internes sont référencés par leur NOM DE CONTENEUR UNIQUE
|
|
# (ark-database, ark-redis, ark-solr) et jamais par db/redis/solr — sinon collision DNS
|
|
# avec coolify-redis/coolify-db sur le réseau partagé "coolify".
|
|
|
|
arkindex_env: production
|
|
public_hostname: https://${DOMAIN}
|
|
local_imageserver_id: 12345
|
|
secret_key: "${SECRET_KEY}"
|
|
|
|
cache:
|
|
type: redis
|
|
url: redis://ark-redis:6379/1
|
|
|
|
database:
|
|
host: ark-database
|
|
port: 5432
|
|
name: arkindex
|
|
user: arkindex
|
|
password: "${PG_PASS}"
|
|
|
|
redis:
|
|
host: ark-redis
|
|
port: 6379
|
|
|
|
s3:
|
|
access_key_id: "${GK_ID}"
|
|
secret_access_key: "${GK_SECRET}"
|
|
endpoint: https://s3.${DOMAIN}
|
|
region: local
|
|
|
|
allowed_hosts:
|
|
- ${DOMAIN}
|
|
|
|
session:
|
|
cookie_domain: ${DOMAIN}
|
|
cookie_secure: true
|
|
|
|
csrf:
|
|
cookie_domain: ${DOMAIN}
|
|
cookie_secure: true
|
|
trusted_origins:
|
|
- 'https://${DOMAIN}'
|
|
|
|
cors:
|
|
origin_whitelist:
|
|
- https://${DOMAIN}
|
|
|
|
features:
|
|
signup: no
|
|
search: yes
|
|
|
|
solr:
|
|
api_url: http://ark-solr:8983/solr/
|
|
|
|
static:
|
|
cdn_assets_url: https://assets.teklia.com/arkindex
|
|
frontend_version: 1.12.2
|
|
|
|
ponos:
|
|
default_env:
|
|
ARKINDEX_API_URL: https://${DOMAIN}/api/v1/
|
|
|
|
ingest:
|
|
access_key_id: "${GK_ID}"
|
|
secret_access_key: "${GK_SECRET}"
|
|
endpoint: https://s3.${DOMAIN}
|
|
region: local
|
|
imageserver_id: 67890
|
|
extra_buckets:
|
|
- ingest
|
|
prefix_by_bucket_name: false
|