DenozordecandCursor
0e9349e508
Docker images / prepare-release (push) Successful in 5s
Docker images / backend-image (push) Successful in 2m52s
Docker images / frontend-image (push) Successful in 2m23s
Docker images / notify-webhook (push) Skipped
Docker images / updater-image (push) Successful in 38s
Docker images / publish-release (push) Successful in 8s
JWT на backend, handoff/callback на UI, RBAC mm:*, AUTH_* в compose. Co-authored-by: Cursor <[email protected]>
38 lines
1.2 KiB
Plaintext
38 lines
1.2 KiB
Plaintext
# Production .env for MikrotikManager Traefik deploys. Do not commit.
|
|
# Use with:
|
|
# deploy/docker-compose.traefik.yml — own Traefik (standalone)
|
|
# deploy/docker-compose.traefik-cdn.yml — reuse CDNManager Traefik (network cdnmanager)
|
|
# deploy/run-beside-cdn-traefik.sh — plain docker CLI beside CDNManager
|
|
|
|
# --- Public host ---
|
|
MM_DOMAIN=mm.shnt.top
|
|
# Must match the public HTTPS origin of the UI (same as MM_DOMAIN with https://).
|
|
CORS_ORIGIN=https://mm.shnt.top
|
|
|
|
# --- Portal SSO (MM backend) ---
|
|
AUTH_REQUIRED=true
|
|
AUTH_JWT_SECRET=
|
|
AUTH_ISSUER=https://auth.shnt.top
|
|
AUTH_PORTAL_URL=https://auth.shnt.top
|
|
|
|
# --- Traefik / Let's Encrypt (only for docker-compose.traefik.yml standalone) ---
|
|
# Not required when attaching to CDNManager Traefik (traefik-cdn / run-beside script).
|
|
CF_DNS_API_TOKEN=
|
|
[email protected]
|
|
# TRAEFIK_IMAGE_TAG=v3.7
|
|
# TRAEFIK_HTTP_PORT=80
|
|
# TRAEFIK_HTTPS_PORT=443
|
|
# TRAEFIK_LOG_LEVEL=INFO
|
|
|
|
# --- Images ---
|
|
MM_BACKEND_IMAGE_TAG=latest
|
|
MM_FRONTEND_IMAGE_TAG=latest
|
|
MM_UPDATER_IMAGE_TAG=latest
|
|
|
|
# --- Updater (optional; needed for private registry pull) ---
|
|
REGISTRY_USERNAME=
|
|
REGISTRY_PASSWORD=
|
|
# POLL_INTERVAL_SECONDS=300
|
|
# HEALTH_TIMEOUT_SECONDS=120
|
|
# STOP_TIMEOUT_SECONDS=30
|