60 lines
2.5 KiB
Cheetah
60 lines
2.5 KiB
Cheetah
# Example Hammer server config for Docker.
|
|
#
|
|
# Mount this file at /data/hammer_data/config.toml (see docker-compose.yml) or
|
|
# leave it out entirely to run with defaults. Every value below is optional.
|
|
#
|
|
# Full reference: ../docs/HOW-TO-RUN-A-SERVER-DOCKER.md
|
|
|
|
# Public name shown to users. Set this to the hostname clients will connect to.
|
|
host = "{{ env "DOMAIN" }}"
|
|
|
|
# Plain HTTP port inside the container. The compose port mapping and the image's
|
|
# HEALTHCHECK both assume 8080; changing it means changing those too.
|
|
port = 8080
|
|
|
|
# Time zone for rendered timestamps and log lines, as an IANA zone ID. Defaults to
|
|
# the container's zone (UTC unless TZ is set in docker-compose.yml).
|
|
timezone = "{{ env "TZ" }}"
|
|
|
|
# Do NOT set bindHosts under Docker. The main server guide recommends
|
|
# ["127.0.0.1", "::1"] behind a reverse proxy, but inside a container that binds
|
|
# the container's own loopback, so the published port reaches nothing and the
|
|
# server is unreachable while still reporting healthy. Restrict exposure on the
|
|
# host side instead, with HAMMER_HTTP_BIND in docker-compose.yml.
|
|
|
|
# The externally visible base URL, used for links placed in emails. Set this when
|
|
# running behind a reverse proxy so generated links use the right scheme/host.
|
|
publicUrl = "https://{{ env "DOMAIN" }}"
|
|
|
|
# TLS: the recommended Docker setup terminates TLS at a reverse proxy in front of
|
|
# the container and forwards plain HTTP here. In that case leave sslCert unset.
|
|
#
|
|
# To have Hammer terminate TLS itself, mount the host certificate directory into
|
|
# the container and publish 443. Use absolute container paths: unlike
|
|
# termsOfService and privacyPolicy, cert paths are NOT resolved relative to this
|
|
# file, and a renewed cert is only picked up when the container restarts.
|
|
# sslPort = 443
|
|
# [sslCert]
|
|
# certChainPath = "/certs/live/hammer.example.com/fullchain.pem"
|
|
# privateKeyPath = "/certs/live/hammer.example.com/privkey.pem"
|
|
|
|
# Storage defaults to an in-process (embedded) PostgreSQL under
|
|
# /data/hammer_data/pgdata — no external database needed. To use an external
|
|
# PostgreSQL instead, uncomment this and the postgres service in
|
|
# docker-compose.yml; host must match that service name.
|
|
# [storage]
|
|
# type = "remote"
|
|
# [storage.remote]
|
|
# host = "postgres"
|
|
# port = 5432
|
|
# database = "hammer"
|
|
# user = "hammer"
|
|
# password = "change-me"
|
|
# useSsl = false # defaults to true; a plain postgres container serves no TLS
|
|
|
|
trustProxyForwarding = true
|
|
|
|
# Optional Features
|
|
richLinkPreviews = true
|
|
communityEnabled = true
|
|
#emailProvider = "SMTP" |