Something went wrong. Try again.
Coves frontend - a photon fork
Something went wrong. Try again.
coves-frontend .env.prod.example
1.9 kB · 37 lines
at main
1234567891011121314151617181920212223242526272829303132333435363738# Production runtime environment for the Coves frontend container.# Copy to .env.prod on the server (gitignored). Loaded by docker-compose.prod.yml# via env_file. Full reference for every variable: docs/ENVIRONMENT.md.# Public URL of this frontend. adapter-node needs it for origin / form-action# checks; its https scheme also gates the CSP upgrade-insecure-requests directive.ORIGIN=https://coves.social# Header the front proxy (the backend stack's Caddy) sets to the real client IP.# Caddy's `header_up X-Real-IP {remote_host}` OVERWRITES any client-sent value —# that is the property this setting depends on. Do not change one without the other.ADDRESS_HEADER=x-real-ip# The Coves backend as the BROWSER reaches it. Required in production.PUBLIC_INSTANCE_URL=https://coves.social# The backend as THIS CONTAINER reaches it: straight to the appview container# over coves-prod-network, skipping the Caddy round-trip. Plaintext http is# allowed only for this exact origin, hence ALLOW_HTTP_INTERNAL_INSTANCE.PUBLIC_INTERNAL_INSTANCE=http://appview:8080ALLOW_HTTP_INTERNAL_INSTANCE=true# Origins <video> may stream from (CSP media-src): our PDS (both hostnames) and# the tidepool bridge PDS that hosts blobs for bridged Lemmy communities. Must# match the media-src list in the backend Caddyfile's fallback CSP.CSP_VIDEO_ORIGINS=https://pds.coves.me https://coves.me https://tdpl.io# Login is pinned to PUBLIC_INSTANCE_URL. Must stay true: connect-src in the# app's CSP only allows this instance (docs/ENVIRONMENT.md, Security headers).#PUBLIC_LOCK_TO_INSTANCE=true# Leave UNSET in production: SSR currently activates a cross-request locale race# and a guest-rendered flash for logged-in users (docs/ENVIRONMENT.md, Rendering).#PUBLIC_SSR_ENABLED=false# Stack traces in the structured server log (scrubbed). Set 0 to omit.#LOG_STACKS=0