cesnimda
bfa8cfd357
- rewrote homelab (content + topology diagram + stack) from a live inspection of the host: Ubuntu 24.04, ~30 Docker services behind Traefik (Cloudflare-fronted, TLS, HTTP/3), Authentik SSO forward-auth, CrowdSec, Pi-hole, self-hosted Gitea + CI runner, socket-proxy, per-app network isolation; WordPress framed as being decommissioned (not future arch) - deploy: docker-compose now uses Traefik labels + traefik_proxy network (was assumed nginx edge); .env.example adds SITE_HOST/TRAEFIK_ENTRYPOINT; colophon + ARCHITECTURE/DOCKER/ DEPLOYMENT specs corrected nginx-edge -> Traefik (site container still serves via nginx) - PROJECT_STATUS: pre-launch checklist updated; infra section added Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
21 lines
868 B
Bash
21 lines
868 B
Bash
# Copy to .env and fill in. Secrets never go in git or in the image (DOCKER_SPEC §3).
|
|
|
|
# --- Contact relay: SMTP (submission endpoint of your mail provider) ---
|
|
SMTP_HOST=
|
|
SMTP_PORT=587
|
|
SMTP_USER=
|
|
SMTP_PASSWORD= # secret — provide via env file (chmod 600) or a Docker secret
|
|
RELAY_FROM= # optional From address; defaults to SMTP_USER / RELAY_TO
|
|
RELAY_TO=connor.babbington@cesnimda.co.uk
|
|
RELAY_ALLOWED_ORIGIN=https://cesnimda.co.uk
|
|
RELAY_RATE_LIMIT=5 # requests per window per IP
|
|
RELAY_WINDOW_SECONDS=600
|
|
|
|
# --- Site build ---
|
|
PUBLIC_SITE_URL=https://cesnimda.co.uk
|
|
|
|
# --- Infra (Traefik host reverse proxy) ---
|
|
PROXY_NETWORK=traefik_proxy # existing external Traefik docker network
|
|
SITE_HOST=cesnimda.co.uk # Host rule for the Traefik routers
|
|
TRAEFIK_ENTRYPOINT=websecure-external # Traefik entrypoint name on the host
|