mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-08 03:07:14 +02:00
- Add `server.config_upstream_url` default in `roles/web-app-bluesky/config/main.yml` to define upstream for /config (defaults to https://ip.bsky.app/config). - Introduce front-proxy injection `extra_locations.conf.j2` that: - proxies `/config` to the upstream, - sets SNI and correct Host header, - normalizes CORS headers for same-origin consumption. - Wire the proxy injection only for the Web domain in `roles/web-app-bluesky/tasks/main.yml` via `proxy_extra_configuration`. - Force fresh social-app checkout and patch `src/state/geolocation.tsx` to `const BAPP_CONFIG_URL = '/config'` in `roles/web-app-bluesky/tasks/02_social_app.yml`; notify `docker compose build` and `up`. - Tidy and re-group PDS env in `roles/web-app-bluesky/templates/env.j2` (no functional change). - Add vars in `roles/web-app-bluesky/vars/main.yml`: - `BLUESKY_FRONT_PROXY_CONTENT` (renders the extra locations), - `BLUESKY_CONFIG_UPSTREAM_URL` (reads `server.config_upstream_url`). Security/Scope: - Only affects the Bluesky web frontend (same-origin `/config`); PDS/API and AppView remain unchanged. Refs: - Conversation: https://chatgpt.com/share/68b8dd3a-2100-800f-959e-1495f6320aab
31 lines
1.1 KiB
Django/Jinja
31 lines
1.1 KiB
Django/Jinja
# General
|
|
PDS_HOSTNAME="{{ BLUESKY_API_DOMAIN }}"
|
|
PDS_CRAWLERS=https://bsky.network
|
|
LOG_ENABLED={{ MODE_DEBUG | string | lower }}
|
|
PDS_BLOBSTORE_DISK_LOCATION={{ BLUESKY_PDS_BLOBSTORE_LOCATION }}
|
|
PDS_DATA_DIRECTORY={{ BLUESKY_PDS_DATA_DIR }}
|
|
PDS_BLOB_UPLOAD_LIMIT=52428800
|
|
PDS_DID_PLC_URL=https://plc.directory
|
|
|
|
# See https://mattdyson.org/blog/2024/11/self-hosting-bluesky-pds/
|
|
PDS_SERVICE_HANDLE_DOMAINS=".{{ PRIMARY_DOMAIN }}"
|
|
PDS_SERVICE_DID="did:web:{{ BLUESKY_API_DOMAIN }}"
|
|
|
|
# Email
|
|
PDS_ADMIN_EMAIL="{{ BLUESKY_ADMIN_EMAIL }}"
|
|
PDS_EMAIL_SMTP_URL=smtps://{{ users['no-reply'].email }}:{{ users['no-reply'].mailu_token }}@{{ SYSTEM_EMAIL.HOST }}:{{ SYSTEM_EMAIL.PORT }}/
|
|
PDS_EMAIL_FROM_ADDRESS={{ users['no-reply'].email }}
|
|
|
|
# Credentials
|
|
PDS_JWT_SECRET="{{ BLUESKY_JWT_SECRET }}"
|
|
PDS_ADMIN_PASSWORD="{{ BLUESKY_ADMIN_PASSWORD }}"
|
|
PDS_PLC_ROTATION_KEY_K256_PRIVATE_KEY_HEX="{{ BLUESKY_ROTATION_KEY }}"
|
|
|
|
# View
|
|
PDS_BSKY_APP_VIEW_URL={{ BLUESKY_VIEW_URL }}
|
|
PDS_BSKY_APP_VIEW_DID={{ BLUESKY_VIEW_DID }}
|
|
|
|
# Report
|
|
PDS_REPORT_SERVICE_URL=https://mod.bsky.app
|
|
PDS_REPORT_SERVICE_DID=did:plc:ar7c4by46qjdydhdevvrndac
|