Linus GasserandClaude Opus 5.5
5295915dff
Create/promote the ADMIN_EMAIL account on every start, before the seeds, so the public admin@claper.co/claper default is never created. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
97 lines
3.5 KiB
Bash
97 lines
3.5 KiB
Bash
RECIPE=git.coopcloud.tech/c4dt/claper
|
|
#TIMEOUT=300
|
|
ENABLE_AUTO_UPDATE=true
|
|
ENABLE_BACKUPS=true
|
|
|
|
DOMAIN=claper.example.com
|
|
## Domain aliases
|
|
#EXTRA_DOMAINS=', `www.claper.example.com`'
|
|
LETS_ENCRYPT_ENV=production
|
|
|
|
COMPOSE_FILE="compose.yml"
|
|
|
|
##############################################################################
|
|
# SECRETS
|
|
##############################################################################
|
|
SECRET_DB_PASSWORD_VERSION=v1 # charset=default
|
|
# SECRET_KEY_BASE, must be at least 32 bytes
|
|
SECRET_KEY_BASE_VERSION=v1 # length=64
|
|
# Initial password of the ADMIN_EMAIL account, see ADMIN_EMAIL below
|
|
SECRET_ADMIN_PASS_VERSION=v1 # length=32
|
|
|
|
##############################################################################
|
|
# CLAPER
|
|
##############################################################################
|
|
# Account that is ensured to exist and be an admin, checked on every start.
|
|
# It is created with the admin_pass secret as password; later password changes
|
|
# are done in the UI or with `abra app cmd <app-name> app set_admin_password`.
|
|
# Changing it adds a new admin, the previous one is kept.
|
|
ADMIN_EMAIL=admin@claper.example.com
|
|
|
|
# See https://docs.claper.co/self-hosting/configuration.html
|
|
#ENABLE_ACCOUNT_CREATION=true
|
|
#EMAIL_CONFIRMATION=false
|
|
#ALLOW_UNLINK_EXTERNAL_PROVIDER=true
|
|
#LOGOUT_REDIRECT_URL=https://example.com
|
|
#GS_JPG_RESOLUTION=300x300
|
|
#LANGUAGES=en,fr,es,it,de
|
|
#MAX_FILE_SIZE_MB=15
|
|
#POOL_SIZE=10
|
|
#SAME_SITE_COOKIE=Lax
|
|
## Terminate events with no end date after this many days of inactivity (0 = never)
|
|
#EVENT_INACTIVITY_DAYS=0
|
|
## Legal links on the registration page (both must be set)
|
|
#TERMS_URL=https://example.com/terms
|
|
#PRIVACY_URL=https://example.com/privacy
|
|
## Trusted proxies for client IP detection (default: swarm overlay networks)
|
|
#REMOTE_IP_PROXIES=10.0.0.0/8
|
|
|
|
##############################################################################
|
|
# EMAIL
|
|
##############################################################################
|
|
# Without SMTP, mails are dropped (local adapter).
|
|
MAIL_FROM=noreply@claper.example.com
|
|
MAIL_FROM_NAME=Claper
|
|
|
|
#COMPOSE_FILE="$COMPOSE_FILE:compose.smtp.yml"
|
|
#SMTP_RELAY=smtp.example.com
|
|
#SMTP_PORT=465
|
|
#SMTP_USERNAME=claper@example.com
|
|
#SMTP_AUTH=always
|
|
#SMTP_SSL=true
|
|
#SMTP_TLS=if_available
|
|
#SMTP_RETRIES=1
|
|
#SMTP_NO_MX_LOOKUPS=false
|
|
#SECRET_SMTP_PASS_VERSION=v1
|
|
|
|
##############################################################################
|
|
# SINGLE SIGN ON (OIDC)
|
|
##############################################################################
|
|
# Redirect URI to configure at the provider: https://<DOMAIN>/users/oidc/callback
|
|
#COMPOSE_FILE="$COMPOSE_FILE:compose.oidc.yml"
|
|
#OIDC_PROVIDER_NAME="OpenID Connect"
|
|
#OIDC_ISSUER=https://authentik.example.com/application/o/claper/
|
|
#OIDC_CLIENT_ID=claper
|
|
#OIDC_SCOPES="openid email profile"
|
|
#OIDC_LOGO_URL=/images/icons/openid.png
|
|
#OIDC_PROPERTY_MAPPINGS="roles:custom_attributes.roles,organization:custom_attributes.organization"
|
|
#OIDC_AUTO_REDIRECT_LOGIN=false
|
|
#OIDC_TRUST_EMAIL_VERIFIED=false
|
|
## Only OIDC login, read the README before enabling this
|
|
#DISABLE_PASSWORD_LOGIN=false
|
|
#SECRET_OIDC_SECRET_VERSION=v1 # length=64
|
|
|
|
##############################################################################
|
|
# S3 STORAGE (instead of the local uploads volume)
|
|
##############################################################################
|
|
#COMPOSE_FILE="$COMPOSE_FILE:compose.s3.yml"
|
|
#S3_ACCESS_KEY_ID=
|
|
#S3_REGION=eu-west-3
|
|
#S3_BUCKET=claper
|
|
## S3-compatible services
|
|
#S3_SCHEME=https://
|
|
#S3_HOST=s3.example.com
|
|
#S3_PORT=443
|
|
#S3_PUBLIC_URL=https://s3.example.com
|
|
#SECRET_S3_SECRET_VERSION=v1
|