982777addb
Migrate from homelab.fhirworx.io (LAN-only, IP allowlist) to fhirworx.io (public, Gitea SSO via oauth2-proxy). - Domain: homelab.fhirworx.io → fhirworx.io across all configs - SSO: oauth2-proxy (OIDC/Gitea) + auth-handler nginx for Traefik ForwardAuth (converts 401 → 302 redirect, same as corwins.media auth_request pattern) - Cloudflared: tunnel remote config with 20 hostnames → traefik, DNS CNAME records via CF API - Bootstrap: `docker compose run --rm wire` — idempotent cold-start that creates Gitea admin, OAuth2 app, oauth2-proxy credentials, clears Cloudflare Access apps, syncs tunnel config + DNS - Dashboard: rebranded FHIRWORX, HTTPS links, API tile added - Grafana/Woodpecker/Gitea ROOT_URLs updated to HTTPS
54 lines
1.7 KiB
Plaintext
54 lines
1.7 KiB
Plaintext
# ── Secrets (required) ──────────────────────────────
|
|
POSTGRES_PASSWORD=changeme
|
|
RUSTFS_ROOT_USER=admin
|
|
RUSTFS_ROOT_PASSWORD=changeme
|
|
RUSTFS_ACCESS_KEY=changeme
|
|
RUSTFS_SECRET_KEY=changeme
|
|
GITEA_S3_ACCESS_KEY=changeme
|
|
GITEA_S3_SECRET_KEY=changeme
|
|
GITEA_DB_PASSWORD=changeme
|
|
GITEA_TOKEN=changeme
|
|
WOODPECKER_DB_PASSWORD=changeme
|
|
WOODPECKER_AGENT_SECRET=changeme
|
|
WOODPECKER_GITEA_CLIENT=changeme
|
|
WOODPECKER_GITEA_SECRET=changeme
|
|
|
|
# Nessie Data Lake
|
|
NESSIE_DB_PASSWORD=changeme
|
|
NESSIE_S3_ACCESS_KEY=changeme
|
|
NESSIE_S3_SECRET_KEY=changeme
|
|
|
|
# Polaris Iceberg Catalog
|
|
POLARIS_DB_PASSWORD=changeme
|
|
POLARIS_ROOT_SECRET=changeme
|
|
POLARIS_S3_ACCESS_KEY=changeme
|
|
POLARIS_S3_SECRET_KEY=changeme
|
|
|
|
# Zotero WebDAV (rclone → S3)
|
|
WEBDAV_S3_ACCESS_KEY=changeme
|
|
WEBDAV_S3_SECRET_KEY=changeme
|
|
WEBDAV_USER=zotero
|
|
WEBDAV_PASS=changeme
|
|
|
|
# Databricks (optional)
|
|
DATABRICKS_HOST=
|
|
DATABRICKS_TOKEN=
|
|
|
|
# ── Deployment ──────────────────────────────────────
|
|
# Base domain — all services get {name}.DOMAIN FQDNs.
|
|
# DNS must resolve *.DOMAIN to HOST_IP.
|
|
DOMAIN=fhirworx.io
|
|
HOST_IP=192.168.1.192
|
|
DOCKER_SOCK=/run/user/1000/docker.sock
|
|
|
|
# ── S3 / Object Storage ────────────────────────────
|
|
S3_ENDPOINT=http://rustfs:9000
|
|
S3_REGION=us-east-1
|
|
S3_WAREHOUSE=s3://lakehouse/
|
|
|
|
# ── Grafana ─────────────────────────────────────────
|
|
GF_ADMIN_PASSWORD=admin
|
|
|
|
# ── Woodpecker ──────────────────────────────────────
|
|
WOODPECKER_ADMIN=kert
|