mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-10-10 10:48:10 +02:00
Kevin Veen-Birkenbach
e7702948b8
• Build a custom image and replace upstream entrypoint with docker-entrypoint-custom.sh (strict fail on flag script). • Introduce set_flags.php and wire via ESPOCRM_SET_FLAGS_SCRIPT; apply flags at container start; clear cache afterwards. • Keep exactly one Docker volume (data:/var/www/html/); drop separate custom/extensions mounts. • Compose: use custom image, add healthchecks & depends_on for daemon/websocket; keep service healthy gating. • Ansible: deploy scripts, build & up via handlers; patch siteUrl as www-data; run upgrade non-fatal; always run flag setter. • Vars/Env: add ESPO_INIT_* toggles and ESPOCRM_SET_FLAGS_SCRIPT; refactor variables for scripts & custom image paths. Conversation context: https://chatgpt.com/share/68dd1992-020c-800f-bcf5-2db60cb4aab2
112 lines
4.8 KiB
Django/Jinja
112 lines
4.8 KiB
Django/Jinja
#############################################
|
||
# EspoCRM Docker Environment (.env) – ENGLISH
|
||
# See: https://hub.docker.com/r/espocrm/espocrm
|
||
#############################################
|
||
|
||
# ------------------------------------------------
|
||
# Database connection
|
||
# ------------------------------------------------
|
||
ESPOCRM_DATABASE_PLATFORM=Mysql
|
||
ESPOCRM_DATABASE_HOST={{ database_host }}
|
||
ESPOCRM_DATABASE_PORT={{ database_port }}
|
||
ESPOCRM_DATABASE_NAME={{ database_name }}
|
||
ESPOCRM_DATABASE_USER={{ database_username }}
|
||
ESPOCRM_DATABASE_PASSWORD={{ database_password }}
|
||
|
||
# Disable EspoCRM’s built-in cron (handled externally)
|
||
CRON_DISABLED=true
|
||
|
||
# ------------------------------------------------
|
||
# Initial admin account
|
||
# ------------------------------------------------
|
||
ESPOCRM_ADMIN_USERNAME={{ applications | get_app_conf(application_id, 'users.administrator.username') }}
|
||
ESPOCRM_ADMIN_PASSWORD={{ applications | get_app_conf(application_id, 'credentials.administrator_password') }}
|
||
|
||
# Public base URL of the EspoCRM instance
|
||
ESPOCRM_SITE_URL={{ ESPOCRM_URL }}
|
||
|
||
# ------------------------------------------------
|
||
# General UI & locale settings
|
||
# ------------------------------------------------
|
||
ESPOCRM_CONFIG_LANGUAGE={{ HOST_LL_CC }}
|
||
ESPOCRM_CONFIG_DATE_FORMAT={{ HOST_DATE_FORMAT }}
|
||
ESPOCRM_CONFIG_TIME_FORMAT={{ HOST_TIME_FORMAT }}
|
||
ESPOCRM_CONFIG_TIME_ZONE={{ HOST_TIMEZONE }}
|
||
# ESPOCRM_CONFIG_WEEK_START: 0 = Sunday, 1 = Monday
|
||
ESPOCRM_CONFIG_WEEK_START=1
|
||
ESPOCRM_CONFIG_DEFAULT_CURRENCY={{ HOST_CURRENCY }}
|
||
#ESPOCRM_CONFIG_THOUSAND_SEPARATOR={{ HOST_THOUSAND_SEPARATOR }}
|
||
#ESPOCRM_CONFIG_DECIMAL_MARK={{HOST_DECIMAL_MARK}}
|
||
|
||
# ------------------------------------------------
|
||
# Logger
|
||
# ------------------------------------------------
|
||
ESPOCRM_CONFIG_LOGGER_LEVEL={{ 'DEBUG' if MODE_DEBUG | bool else 'INFO' }}
|
||
ESPOCRM_CONFIG_LOGGER_PATH=php://stdout
|
||
ESPOCRM_CONFIG_LOGGER_ROTATION=false
|
||
|
||
# ------------------------------------------------
|
||
# System SMTP settings
|
||
# ------------------------------------------------
|
||
ESPOCRM_CONFIG_SMTP_SERVER={{ SYSTEM_EMAIL.HOST }}
|
||
ESPOCRM_CONFIG_SMTP_PORT={{ SYSTEM_EMAIL.PORT }}
|
||
ESPOCRM_CONFIG_SMTP_SECURITY={{ "TLS" if SYSTEM_EMAIL.START_TLS else "SSL"}}
|
||
ESPOCRM_CONFIG_SMTP_AUTH=true
|
||
ESPOCRM_CONFIG_SMTP_USERNAME={{ users['contact'].email }}
|
||
ESPOCRM_CONFIG_SMTP_PASSWORD={{ users['contact'].mailu_token }}
|
||
ESPOCRM_CONFIG_OUTBOUND_EMAIL_FROM_NAME={{ applications | get_app_conf(application_id, 'email.from_name')}}
|
||
ESPOCRM_CONFIG_OUTBOUND_EMAIL_FROM_ADDRESS={{ users['contact'].email }}
|
||
|
||
# ------------------------------------------------
|
||
# LDAP settings (optional)
|
||
# Applied only if the feature flag is true
|
||
# ------------------------------------------------
|
||
{% if applications | get_app_conf(application_id, 'features.ldap') %}
|
||
ESPOCRM_CONFIG_AUTHENTICATION_METHOD=Ldap
|
||
ESPOCRM_CONFIG_LDAP_HOST={{ LDAP.SERVER.DOMAIN }}
|
||
ESPOCRM_CONFIG_LDAP_PORT={{ LDAP.SERVER.PORT }}
|
||
# ESPOCRM_CONFIG_LDAP_SECURITY: "", SSL or TLS
|
||
ESPOCRM_CONFIG_LDAP_SECURITY={{ LDAP.SERVER.SECURITY }}
|
||
ESPOCRM_CONFIG_LDAP_USERNAME={{ LDAP.DN.ADMINISTRATOR.DATA }}
|
||
ESPOCRM_CONFIG_LDAP_PASSWORD={{ LDAP.BIND_CREDENTIAL }}
|
||
ESPOCRM_CONFIG_LDAP_BASE_DN={{ LDAP.DN.OU.USERS }}
|
||
ESPOCRM_CONFIG_LDAP_USER_LOGIN_FILTER=(sAMAccountName=%USERNAME%)
|
||
{% endif %}
|
||
|
||
# ------------------------------------------------
|
||
# OpenID Connect settings (optional)
|
||
# Applied only if the feature flag is true
|
||
# ------------------------------------------------
|
||
{% if ESPOCRM_OIDC_ENABLED | bool %}
|
||
|
||
# ------------------------------------------------
|
||
# OpenID Connect settings
|
||
# ------------------------------------------------
|
||
ESPOCRM_CONFIG_OIDC_ALLOW_ADMIN_USER=true
|
||
ESPOCRM_CONFIG_AUTHENTICATION_METHOD=Oidc
|
||
ESPOCRM_CONFIG_OIDC_FALLBACK=false # set true if you want LDAP as fallback
|
||
|
||
ESPOCRM_CONFIG_OIDC_CLIENT_ID={{ OIDC.CLIENT.ID }}
|
||
ESPOCRM_CONFIG_OIDC_CLIENT_SECRET={{ OIDC.CLIENT.SECRET }}
|
||
|
||
ESPOCRM_CONFIG_OIDC_AUTHORIZATION_ENDPOINT={{ OIDC.CLIENT.AUTHORIZE_URL }}
|
||
ESPOCRM_CONFIG_OIDC_TOKEN_ENDPOINT={{ OIDC.CLIENT.TOKEN_URL }}
|
||
ESPOCRM_CONFIG_OIDC_USER_INFO_ENDPOINT={{ OIDC.CLIENT.USER_INFO_URL }}
|
||
ESPOCRM_CONFIG_OIDC_JWKS_ENDPOINT={{ OIDC.CLIENT.CERTS }}
|
||
|
||
ESPOCRM_CONFIG_OIDC_AUTHORIZATION_REDIRECT_URI={{ ESPOCRM_URL }}/oidc/callback
|
||
#ESPOCRM_CONFIG_OIDC_SCOPES=openid,profile,email # Defined in main.yml
|
||
|
||
ESPOCRM_CONFIG_OIDC_CREATE_USER=true
|
||
ESPOCRM_CONFIG_OIDC_SYNC=true
|
||
ESPOCRM_CONFIG_OIDC_USERNAME_CLAIM={{ OIDC.ATTRIBUTES.USERNAME }}
|
||
# ESPOCRM_CONFIG_OIDC_SYNC_TEAMS=true
|
||
# ESPOCRM_CONFIG_OIDC_GROUP_CLAIM=group
|
||
{% endif %}
|
||
|
||
# --- Espo init toggles controlled at container start (used by custom entrypoint)
|
||
ESPO_INIT_MAINTENANCE_MODE=false # false = disable maintenance (recommended)
|
||
ESPO_INIT_CRON_DISABLED=false # false = enable cron jobs in config
|
||
ESPO_INIT_USE_CACHE=true # true = enable caching
|
||
ESPOCRM_SET_FLAGS_SCRIPT={{ ESPOCRM_SET_FLAG_SCRIPT_DOCKER }}
|