hausgeist
1c3c661726
- docker-compose.cc.yml: database env + calcom DATABASE_URL/DIRECT_URL from .env - cc.env.example: require HEX (URL-safe) secrets; hex generation commands
41 lines
1.6 KiB
Bash
41 lines
1.6 KiB
Bash
# cal.diy — Commons Computer deployment env (issue #11, cc branch)
|
|
# Template spec for the production `.env`; ansible renders `.env` from the
|
|
# cc-ansible vault (group_vars/cc_apps/vault.yml) — keep the two in sync.
|
|
# Never commit the real `.env`. Generate secrets with:
|
|
# NEXTAUTH_SECRET=$(openssl rand -hex 32)
|
|
# CALENDSO_ENCRYPTION_KEY=$(openssl rand -hex 24)
|
|
# CALCOM_APP_CREDENTIAL_ENCRYPTION_KEY=$(openssl rand -hex 32)
|
|
# JWT_SECRET=$(openssl rand -hex 32)
|
|
# POSTGRES_PASSWORD=$(openssl rand -hex 24)
|
|
# IMPORTANT: use HEX for all secrets — compose builds DATABASE_URL from
|
|
# POSTGRES_PASSWORD, so it must be URL-safe (base64 `+`/`/` chars break Prisma).
|
|
|
|
NODE_ENV=production
|
|
NEXT_PUBLIC_WEBAPP_URL=https://cal.commonscomputer.com
|
|
NEXT_PUBLIC_API_V2_URL=
|
|
CALCOM_TELEMETRY_DISABLED=1
|
|
ORGANIZATIONS_ENABLED=false
|
|
ALLOWED_HOSTNAMES='"cal.commonscomputer.com"'
|
|
|
|
# --- postgres (compose service `database`; creds also drive DATABASE_URL) ---
|
|
DATABASE_HOST=database
|
|
POSTGRES_USER=caldiy
|
|
POSTGRES_PASSWORD=REPLACE_ME_HEX
|
|
POSTGRES_DB=calendso
|
|
DATABASE_URL=postgresql://caldiy:REPLACE_ME_HEX@database/calendso
|
|
DATABASE_DIRECT_URL=postgresql://caldiy:REPLACE_ME_HEX@database/calendso
|
|
|
|
# --- auth / encryption ---
|
|
NEXTAUTH_URL=https://cal.commonscomputer.com
|
|
NEXTAUTH_SECRET=REPLACE_ME_HEX
|
|
CALENDSO_ENCRYPTION_KEY=REPLACE_ME_HEX
|
|
CALCOM_APP_CREDENTIAL_ENCRYPTION_KEY=REPLACE_ME_HEX
|
|
|
|
# --- redis (compose service `redis`) ---
|
|
REDIS_URL=redis://redis:6379
|
|
REDIS_PORT=6379
|
|
|
|
# --- v2 API (calcom-api service; off for v1) ---
|
|
JWT_SECRET=REPLACE_ME_HEX
|
|
API_KEY_PREFIX=cal_
|
|
WEB_APP_URL=https://cal.commonscomputer.com |