56 lines
2.3 KiB
Text
56 lines
2.3 KiB
Text
# Production Environment Variables for docker-compose.prod.yml
|
|
# Copy this file to .env and fill in the actual values
|
|
|
|
# Required: Phoenix secrets (generate with: mix phx.gen.secret)
|
|
SECRET_KEY_BASE=changeme-run-mix-phx.gen.secret
|
|
TOKEN_SIGNING_SECRET=changeme-run-mix-phx.gen.secret
|
|
|
|
# Required: Hostname for URL generation
|
|
PHX_HOST=localhost
|
|
|
|
# Recommended: Association settings
|
|
ASSOCIATION_NAME="Sportsclub XYZ"
|
|
|
|
# Optional: Admin user (created/updated on container start via Release.seed_admin)
|
|
# In production, set these so the first admin can log in. Change password without redeploy:
|
|
# bin/mv eval "Mv.Release.seed_admin()" (with new ADMIN_PASSWORD or ADMIN_PASSWORD_FILE)
|
|
# FORCE_SEEDS=true re-runs bootstrap seeds even when admin user exists (e.g. after changing roles/custom fields).
|
|
# ADMIN_EMAIL=admin@example.com
|
|
# ADMIN_PASSWORD=secure-password
|
|
# ADMIN_PASSWORD_FILE=/run/secrets/admin_password
|
|
|
|
# Optional: OIDC Configuration
|
|
# These have defaults in docker-compose.prod.yml, only override if needed
|
|
# OIDC_CLIENT_ID=mv
|
|
# OIDC_BASE_URL=http://localhost:8080/auth/v1
|
|
# OIDC_REDIRECT_URI=http://localhost:4001/auth/user/oidc/callback
|
|
# OIDC_CLIENT_SECRET=your-oidc-client-secret
|
|
|
|
# Optional: OIDC group → Admin role sync (e.g. Authentik groups from profile scope)
|
|
# If OIDC_ADMIN_GROUP_NAME is set, users in that group get Admin role on registration/sign-in.
|
|
# OIDC_GROUPS_CLAIM defaults to "groups" (JWT claim name for group list).
|
|
# OIDC_ADMIN_GROUP_NAME=admin
|
|
# OIDC_GROUPS_CLAIM=groups
|
|
|
|
# Optional: Show only OIDC sign-in on login page (hide password form).
|
|
# When set to true and OIDC is configured, users see only the Single Sign-On button.
|
|
# OIDC_ONLY=true
|
|
|
|
# Optional: Vereinfacht accounting integration (finance-contacts sync)
|
|
# If set, these override values from Settings UI; those fields become read-only.
|
|
# VEREINFACHT_API_URL=https://api.verein.visuel.dev/api/v1
|
|
# VEREINFACHT_API_KEY=your-api-key
|
|
# VEREINFACHT_CLUB_ID=2
|
|
# VEREINFACHT_APP_URL=https://app.verein.visuel.dev
|
|
|
|
# Optional: Mail / SMTP (transactional emails). If set, overrides Settings UI.
|
|
# Export current UI settings to .env: mix mv.export_smtp_to_env
|
|
# SMTP_HOST=smtp.example.com
|
|
# SMTP_PORT=587
|
|
# SMTP_USERNAME=user
|
|
# SMTP_PASSWORD=secret
|
|
# SMTP_PASSWORD_FILE=/run/secrets/smtp_password
|
|
# SMTP_SSL=tls
|
|
# SMTP_VERIFY_PEER=false
|
|
# MAIL_FROM_EMAIL=noreply@example.com
|
|
# MAIL_FROM_NAME=Mila
|