amania-jailbreak
3bb4d5aa65
- ルートDockerfileで npm ci をビルド時に一元実行（node_modulesの競合破損を防止） - web/api/workerをYAMLアンカーで共通ビルド構成に変更し、.:/workspace のbind mountを削除 - vinextは --hostname でバインド指定（--host は無視される） - minio-initを削除（APIがbucketを自動作成）し、MinIOをexposeのみの内部公開に変更 - .dockerignore を追加し、.wranglerディレクトリをDockerfile内で事前作成
43 lines
1.5 KiB
Bash
43 lines
1.5 KiB
Bash
NODE_ENV=development
|
|
PORT=4000
|
|
PUBLIC_BASE_URL=http://localhost:4000
|
|
WEB_ORIGIN=http://localhost:3000
|
|
NEXT_PUBLIC_AUTH_MODE=demo
|
|
|
|
# --- Storage (MinIO via docker compose) -------------------------------------
|
|
# Leave DATABASE_URL empty to run with an in-memory store instead of Postgres.
|
|
# docker-compose.yml keeps MinIO internal-only (no published ports/domain) and
|
|
# all uploads flow through the API, so the API uses the internal endpoint.
|
|
# When running the API on the host instead of inside compose, re-add MinIO's
|
|
# host ports (9000/9001) to docker-compose.yml first.
|
|
DATABASE_URL=postgres://altdock:altdock@localhost:5432/altdock
|
|
STORAGE_MODE=s3
|
|
S3_ENDPOINT=http://localhost:9000
|
|
S3_REGION=us-east-1
|
|
S3_BUCKET=altdock
|
|
S3_ACCESS_KEY_ID=minioadmin
|
|
S3_SECRET_ACCESS_KEY=minioadmin123
|
|
S3_FORCE_PATH_STYLE=true
|
|
# MinIO root credentials, consumed by docker-compose.yml. CHANGE in production.
|
|
MINIO_ROOT_USER=minioadmin
|
|
MINIO_ROOT_PASSWORD=minioadmin123
|
|
# Only needed when MinIO is exposed behind a reverse proxy / domain:
|
|
MINIO_SERVER_URL=
|
|
MINIO_BROWSER_REDIRECT_URL=
|
|
|
|
# demo works without an identity provider; production should use generic OIDC.
|
|
AUTH_MODE=demo
|
|
SESSION_SECRET=replace-with-at-least-32-random-characters
|
|
OIDC_ISSUER_URL=
|
|
OIDC_CLIENT_ID=
|
|
OIDC_CLIENT_SECRET=
|
|
OIDC_REDIRECT_URI=http://localhost:4000/auth/callback
|
|
|
|
MAX_UPLOAD_BYTES=5368709120
|
|
MAX_ARCHIVE_ENTRIES=2048
|
|
MAX_EXPANDED_BYTES=8589934592
|
|
MAX_SOURCES_PER_WORKSPACE=3
|
|
MAX_APPS_PER_SOURCE=20
|
|
MAX_STORAGE_BYTES=21474836480
|
|
PROCESS_INLINE=true
|