jonas/kirche-einfach
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: prod env checker, secret guidance, internet-exposure runbook

Browse source
This commit is contained in:
Jonas Miederer 2026-09-14 21:39:06 +02:00
parent c3c4986979
commit 25cf645295
5 changed files with 219 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.env.example
View file

@ -1,4 +1,6 @@
# Copy to `.env` and fill in values. `.env` is gitignored.
# Generate secrets with: openssl rand -hex 32
# Validate before deploying: uv run python scripts/check_prod.py --env ../.env
# Dev defaults live in docker-compose.yml (APP_ENV=dev, FORGEJO_USERNAME=jonas).
# Prod overrides via this .env file (e.g. APP_ENV=prod).
# Paths resolve from the repo root in code.
@ -12,6 +14,8 @@ FORGEJO_TOKEN=
LANGFLOW_VERSION=1.12.0
LANGFLOW_URL=http://langflow:7860
LANGFLOW_SUPERUSER=langflow
# Long random values (check_prod.py enforces length). Never leave the
# placeholders: the authoring UI is internet-facing.
LANGFLOW_SUPERUSER_PASSWORD=
LANGFLOW_SECRET_KEY=
# Single static key; validated against env (LANGFLOW_API_KEY_SOURCE=env), superuser scope.