dev_agent
ee6c1d6bc4
Co-authored-by: dev_agent <17+dev_agent@code.cubecraftcreations.com> Co-committed-by: dev_agent <17+dev_agent@code.cubecraftcreations.com>
35 lines
1.5 KiB
Bash
35 lines
1.5 KiB
Bash
# Example environment for the NestQuest API container deployment.
|
|
#
|
|
# Copy to ``deploy/.env`` (git-ignored) and fill in REAL values there;
|
|
# this example carries placeholder names only and is never a source of
|
|
# secrets. Compose loads ``deploy/.env`` into the api service; the
|
|
# API fails fast on startup when any of these is unset or empty
|
|
# (api/config.py — there are no silent defaults).
|
|
|
|
# The static panel-plane service token the HA integration presents as
|
|
# a Bearer credential on /api/v1/panel/* routes. Generate one, e.g.:
|
|
# python -c "import secrets; print(secrets.token_urlsafe(32))"
|
|
NESTQUEST_PANEL_TOKEN=
|
|
|
|
# The Authentik OIDC settings the admin plane verifies JWTs against.
|
|
NESTQUEST_OIDC_ISSUER=
|
|
NESTQUEST_OIDC_AUDIENCE=
|
|
NESTQUEST_OIDC_JWKS_URL=
|
|
|
|
# The host interface the API's port 8080 is published on (compose
|
|
# interpolation, not read by the API). Defaults to 127.0.0.1 when
|
|
# unset; on the API box set the LAN address the reverse proxy
|
|
# forwards to, e.g. 10.60.1.14.
|
|
NESTQUEST_BIND_ADDRESS=
|
|
|
|
# Admin PWA build args (compose interpolation into the pwa service's
|
|
# VITE_* build args; baked into the bundle, so rebuild after changing).
|
|
# PUBLIC values, not secrets: the Authentik application is a PKCE client
|
|
# with no client secret. All three are required — the pwa image build
|
|
# fails when any is empty.
|
|
# NESTQUEST_AUTHENTIK_ISSUER=https://auth.cubecraftlabs.com/application/o/nestquest/
|
|
# NESTQUEST_API_BASE_URL=https://nestquest.cubecraftlabs.com
|
|
NESTQUEST_AUTHENTIK_CLIENT_ID=
|
|
NESTQUEST_AUTHENTIK_ISSUER=
|
|
NESTQUEST_API_BASE_URL=
|