mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-09 11:47:14 +02:00
Kevin Veen-Birkenbach
bc56940e55
- Removed obsolete TODO.md - Added config/main.yml with service, feature, CSP, and registration settings - Added schema/main.yml defining vaulted SECRET_KEY (alphanumeric) - Added tasks/main.yml to load stateful stack - Added Dockerfile.j2 ensuring data/media dirs - Added docker-compose.yml.j2 with application, worker, redis, volumes - Added env.j2 with registration, secrets, DB, Redis, OIDC support - Extended vars/main.yml with BookWyrm variables and OIDC, Docker, Redis settings - Updated meta/main.yml with logo and run_after dependencies Ref: https://chatgpt.com/share/68b6c060-3a0c-800f-89f8-e114a16a4a80
41 lines
1.6 KiB
Django/Jinja
41 lines
1.6 KiB
Django/Jinja
# Core
|
||
BOOKWYRM_URL="{{ BOOKWYRM_URL }}"
|
||
DOMAIN="{{ BOOKWYRM_HOSTNAME }}"
|
||
PORT="{{ WEB_PORT }}"
|
||
WEB_PROTOCOL="{{ WEB_PROTOCOL }}"
|
||
MEDIA_ROOT="/app/media"
|
||
DATA_ROOT="/app/data"
|
||
REGISTRATION_OPEN={{ BOOKWYRM_REGISTRATION_OPEN }}
|
||
ALLOW_INVITE_REQUESTS={{ BOOKWYRM_ALLOW_INVITE_REQUESTS }}
|
||
|
||
# Django/Secrets (provide via vault/env in production)
|
||
SECRET_KEY="{{ BOOKWYRM_SECRET_KEY }}"
|
||
EMAIL="{{ users['no-reply'].email }}"
|
||
|
||
# Database
|
||
DATABASE_URL="postgres://{{ database_username }}:{{ database_password }}@{{ database_host }}:{{ database_port }}/{{ database_name }}"
|
||
|
||
# Redis / Celery
|
||
REDIS_BROKER_URL="redis://{{ BOOKWYRM_REDIS_HOST }}:{{ BOOKWYRM_REDIS_PORT }}/0"
|
||
REDIS_CACHE_URL="redis://{{ BOOKWYRM_REDIS_HOST }}:{{ BOOKWYRM_REDIS_PORT }}/1"
|
||
|
||
# Proxy (if BookWyrm sits behind reverse proxy)
|
||
FORWARDED_ALLOW_IPS="*"
|
||
USE_X_FORWARDED_HOST="true"
|
||
SECURE_PROXY_SSL_HEADER="HTTP_X_FORWARDED_PROTO,{{ WEB_PROTOCOL }}"
|
||
|
||
# OIDC (optional – only if BOOKWYRM_OIDC_ENABLED)
|
||
{% if BOOKWYRM_OIDC_ENABLED %}
|
||
OIDC_TITLE="{{ BOOKWYRM_OIDC_LABEL | replace('\"','\\\"') }}"
|
||
OIDC_ISSUER="{{ BOOKWYRM_OIDC_ISSUER }}"
|
||
OIDC_AUTHORIZATION_ENDPOINT="{{ BOOKWYRM_OIDC_AUTH_URL }}"
|
||
OIDC_TOKEN_ENDPOINT="{{ BOOKWYRM_OIDC_TOKEN_URL }}"
|
||
OIDC_USERINFO_ENDPOINT="{{ BOOKWYRM_OIDC_USERINFO_URL }}"
|
||
OIDC_END_SESSION_ENDPOINT="{{ BOOKWYRM_OIDC_LOGOUT_URL }}"
|
||
OIDC_JWKS_URI="{{ BOOKWYRM_OIDC_JWKS_URL }}"
|
||
OIDC_CLIENT_ID="{{ BOOKWYRM_OIDC_CLIENT_ID }}"
|
||
OIDC_CLIENT_SECRET="{{ BOOKWYRM_OIDC_CLIENT_SECRET }}"
|
||
OIDC_SCOPES="{{ BOOKWYRM_OIDC_SCOPES }}"
|
||
OIDC_UNIQUE_ATTRIBUTE="{{ BOOKWYRM_OIDC_UNIQUE_ATTRIBUTE }}"
|
||
{% endif %}
|