Linus Gasser
e27e8b7b4f
This allows you to run an always-on node for your radicle projects and then synchronise with other nodes. It offers the node and a web-frontend, which is read-only.
55 lines
2.1 KiB
Bash
55 lines
2.1 KiB
Bash
TYPE=radicle
|
|
ENABLE_AUTO_UPDATE=true
|
|
ENABLE_BACKUPS=true
|
|
|
|
DOMAIN=radicle.example.com
|
|
LETS_ENCRYPT_ENV=production
|
|
#TIMEOUT=120
|
|
|
|
COMPOSE_FILE="compose.yml"
|
|
|
|
#############################################
|
|
# Seed node identity & policy
|
|
#############################################
|
|
# Human-readable node alias shown to the network.
|
|
RAD_ALIAS=my-seed
|
|
# Public p2p address advertised to peers. Must resolve to this host and the
|
|
# port below must be open on the firewall. Format: host:port
|
|
RAD_EXTERNAL_ADDRESS=radicle.example.com:8776
|
|
# Public seeder: seed every repo announced to us ("allow" + scope "all").
|
|
# Set RAD_SEEDING_POLICY=allow and RAD_SEEDING_SCOPE=followed to seed only the
|
|
# repos you explicitly `rad seed`. RAD_SEEDING_POLICY=block seeds nothing by
|
|
# default. Only applied on first deploy; edit config.json in the volume after.
|
|
RAD_SEEDING_POLICY=allow
|
|
RAD_SEEDING_SCOPE=all
|
|
# p2p listen/publish port (opened on the host firewall).
|
|
RAD_P2P_PORT=8776
|
|
|
|
#############################################
|
|
# Image version pins
|
|
#############################################
|
|
# Tag of the git.coopcloud.tech/c4dt/radicle image (bundles radicle-node + rad
|
|
# + radicle-httpd). Matches the packaged radicle-node release.
|
|
RADICLE_VERSION=1.9.1
|
|
# radicle-httpd release baked into the radicle image (build-time ARG). Bump
|
|
# together with the image when upgrading, keep in sync with build/node/Dockerfile.
|
|
RADICLE_HTTPD_VERSION=0.26.0
|
|
# Tag of the git.coopcloud.tech/c4dt/radicle-explorer image (rolling release;
|
|
# pinned to the commit/date the recipe was tested against).
|
|
EXPLORER_VERSION=2026-07-17
|
|
|
|
#############################################
|
|
# Vendored config versions (bump when the file content changes)
|
|
#############################################
|
|
NGINX_CONF_VERSION=v1
|
|
EXPLORER_CONFIG_VERSION=v1
|
|
NODE_ENTRYPOINT_VERSION=v1
|
|
|
|
#############################################
|
|
# Secrets
|
|
#############################################
|
|
# Passphrase encrypting the node's private key. Generated once and kept in the
|
|
# volume; the node reads it via RAD_PASSPHRASE. Set `generate=false` and create
|
|
# it manually if you want an unencrypted key (empty passphrase).
|
|
SECRET_KEYPASS_VERSION=v1 # length=32
|