6720a5aeb2
Some checks failed
CI / Unit & Component Tests (pull_request) Successful in 5m45s
CI / OCR Service Tests (pull_request) Successful in 47s
CI / fail2ban Regex (pull_request) Has been cancelled
CI / Compose Bucket Idempotency (pull_request) Has been cancelled
CI / Backend Unit Tests (pull_request) Has been cancelled
- Move POSTGRES_USER to obs.env (non-secret, constant across envs) - Replace cp -r with rsync -a --delete so removed config files are purged from /opt/familienarchiv on next deploy instead of lingering - Document --env-file ordering contract in validate + start steps: obs.env first (defaults), obs-secrets.env second (wins on dupes) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
25 lines
1.1 KiB
Bash
25 lines
1.1 KiB
Bash
# Non-secret observability stack configuration — tracked in git.
|
|
# Secret values (passwords, keys) are injected by CI from Gitea secrets
|
|
# into /opt/familienarchiv/obs-secrets.env at deploy time.
|
|
#
|
|
# For local dev the main .env file supplies these values instead;
|
|
# this file is only used in the CI/production path.
|
|
|
|
# Host ports (all bound to 127.0.0.1 — Caddy is the external entry point)
|
|
PORT_GRAFANA=3003
|
|
PORT_GLITCHTIP=3002
|
|
PORT_PROMETHEUS=9090
|
|
|
|
# Public URLs — used for internal redirects, alert email links, OAuth callbacks
|
|
GF_SERVER_ROOT_URL=https://grafana.archiv.raddatz.cloud
|
|
GLITCHTIP_DOMAIN=https://glitchtip.archiv.raddatz.cloud
|
|
|
|
POSTGRES_USER=archiv
|
|
|
|
# PostgreSQL hostname for GlitchTip db-init and workers.
|
|
# The actual value depends on the Compose project name — it is not a fixed string.
|
|
# CI sets POSTGRES_HOST in obs-secrets.env per environment:
|
|
# staging: archiv-staging-db-1 (project archiv-staging + service db)
|
|
# production: archiv-production-db-1 (project archiv-production + service db)
|
|
# For local dev, set POSTGRES_HOST in your .env file (defaults to archive-db there).
|