cgalo5758
6dbce6140f
Register bool and duration ConfigSpec keys from the Default's type, move fedwiki's four sync knobs and discourse's two into their integrations' ConfigSpecs, and replace core's read of fedwiki-custom-domain-target with a core domains-connect-target key resolved once and threaded through server and worker config. Generate init's optional-integration scaffold sections from each registered ConfigSpec instead of the hand-maintained list, and reword the Temporal boot warning generically. Archives the integration-config-parity change; status bookkeeping and the verify-skill doc follow with the test-stack commit.
52 lines
2.0 KiB
YAML
52 lines
2.0 KiB
YAML
# member-console starter configuration (written by `member-console init`).
|
|
#
|
|
# Fill in the values for your deployment, then run `member-console start`.
|
|
# Startup validates this file and reports anything required that is missing or
|
|
# malformed. Any value can also be supplied via an MC_-prefixed environment
|
|
# variable (e.g. MC_DB_DSN) or, for secrets, a "<key>-file" variant that reads the
|
|
# value from a file path.
|
|
|
|
# --- Required ---
|
|
|
|
# Public URL this console is served at (used for OAuth redirect and CSRF origin).
|
|
base-url: "https://console.example.com"
|
|
port: "8080"
|
|
|
|
# PostgreSQL connection string.
|
|
db-dsn: "postgres://user:password@localhost:5432/member_console?sslmode=disable"
|
|
|
|
# Valkey/Redis address for the server-side session store.
|
|
valkey-addr: "localhost:6379"
|
|
|
|
# OIDC identity provider. Point at a dedicated application realm — not an
|
|
# administration realm (e.g. Keycloak's `master`), whose account console is not a
|
|
# supported end-user surface.
|
|
oidc-idp-issuer-url: "https://idp.example.com/realms/your-realm"
|
|
oidc-sp-client-id: "member-console"
|
|
# Client secret for a confidential client; leave empty for a public (PKCE) client.
|
|
oidc-sp-client-secret: ""
|
|
|
|
# CSRF signing key — exactly 32 bytes. Generate one with: openssl rand -hex 16
|
|
csrf-secret: ""
|
|
|
|
# Environment: "production" enables Secure session cookies and the CSP
|
|
# upgrade-insecure-requests directive. Use "development" for local, plain-HTTP work.
|
|
env: "production"
|
|
|
|
# --- Optional: Temporal (durable workflows). Leave temporal-host empty to disable. ---
|
|
temporal-host: ""
|
|
temporal-namespace: "default"
|
|
# If your Temporal server authenticates via OIDC, set all three together (or none).
|
|
temporal-oauth-token-url: ""
|
|
temporal-oauth-client-id: ""
|
|
temporal-oauth-client-secret: ""
|
|
temporal-oauth-scopes: []
|
|
|
|
# --- Optional ---
|
|
# URL shown to users in error messages for getting help.
|
|
support-url: ""
|
|
|
|
# Integration sections (Stripe, FedWiki, Discourse, ...) follow below when this
|
|
# file is written by `member-console init`: one commented section per installed
|
|
# integration, generated from its declared configuration.
|