overseerandClaude Opus 5.5
3321a70ffd
Publish port 8080 on ${NESTQUEST_BIND_ADDRESS:-127.0.0.1} so the shared
Traefik proxy (TLS for nestquest.cubecraftlabs.com) can reach the API
box, while an unconfigured deployment stays localhost-only. Document the
variable in deploy/.env.example and the production topology in
api/README.md.
Maestro task 9d121e76-e1ce-479f-aef5-0e5e9756fda8.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
24 lines
1017 B
Bash
24 lines
1017 B
Bash
# Example environment for the NestQuest API container deployment.
|
|
#
|
|
# Copy to ``deploy/.env`` (git-ignored) and fill in REAL values there;
|
|
# this example carries placeholder names only and is never a source of
|
|
# secrets. Compose loads ``deploy/.env`` into the api service; the
|
|
# API fails fast on startup when any of these is unset or empty
|
|
# (api/config.py — there are no silent defaults).
|
|
|
|
# The static panel-plane service token the HA integration presents as
|
|
# a Bearer credential on /api/v1/panel/* routes. Generate one, e.g.:
|
|
# python -c "import secrets; print(secrets.token_urlsafe(32))"
|
|
NESTQUEST_PANEL_TOKEN=
|
|
|
|
# The Authentik OIDC settings the admin plane verifies JWTs against.
|
|
NESTQUEST_OIDC_ISSUER=
|
|
NESTQUEST_OIDC_AUDIENCE=
|
|
NESTQUEST_OIDC_JWKS_URL=
|
|
|
|
# The host interface the API's port 8080 is published on (compose
|
|
# interpolation, not read by the API). Defaults to 127.0.0.1 when
|
|
# unset; on the API box set the LAN address the reverse proxy
|
|
# forwards to, e.g. 10.60.1.14.
|
|
NESTQUEST_BIND_ADDRESS=
|