initial commit on Federted servers

2026-10-19 16:23:55 -05:00
commit b9721ff13f
217 changed files with 31534 additions and 0 deletions
@@ -0,0 +1,43 @@
+# docker compose reads this file for every command (even db-up/migrate),
+# because AUTH_SECRET and POSTGRES_PASSWORD use fail-fast `:?` interpolation.
+POSTGRES_PASSWORD=computer
+# See RUNNING.md to generate this with Docker. Keep stable for IMAP passwords.
+AUTH_SECRET=replace-with-a-random-secret
+NEXTAUTH_URL=http://localhost:3000
+# Optional: cookie Secure flag. Defaults to the NEXTAUTH_URL scheme
+# (https => secure); set explicitly only to override that derivation.
+# COOKIE_SECURE=1
+# Reserved administrator emails; provision them using the operator seed in README.md.
+ADMIN_EMAILS=
+# Keep these defaults on a new install; change only to reuse an existing volume.
+POSTGRES_VOLUME=computer_pgdata
+POSTGRES_VOLUME_EXTERNAL=false
+# Host-side ports for the 127.0.0.1 bindings of app/web. Change on servers
+# where 8080/3000 are already used (scripts/server-deploy.sh pins 18080/13000).
+# If you shift WEB_HOST_PORT locally, set NEXTAUTH_URL to the same
+# browser-facing origin (e.g. http://localhost:3100): the API proxy's origin
+# allowlist matches browser Origin against NEXTAUTH_URL, so a mismatch makes
+# every mutating request fail with 403 "Invalid request origin".
+#APP_HOST_PORT=8080
+#WEB_HOST_PORT=3000
+# Client-owned Authelia integration remains stubbed until connected.
+OIDC_ISSUER=REPLACE_ME
+OIDC_CLIENT_ID=REPLACE_ME
+OIDC_CLIENT_SECRET=REPLACE_ME
+
+# --- Optional, not needed for the Compose stack ---
+# Go API listen port (default 8080).
+#PORT=8080
+# Database URL fallback used by the Makefile when DATABASE_URL is unset.
+#DB_URL=postgres://computer:computer@localhost:5432/computer?sslmode=disable
+# Host-level integration tests (normally run via `make integration` instead):
+#TEST_DATABASE_URL=postgres://computer:computer@localhost:5432/computer?sslmode=disable
+# Browser tests (scripts/e2e.mjs):
+#BASE_URL=http://localhost:3000
+#CHROMIUM_PATH=/usr/bin/chromium
+# E2E_KEEP_DATA=1 keeps the QA account instead of deleting it.
+# Allows CardDAV/IMAP/preview dials to private ranges, and relaxes CardDAV's
+# https requirement (Basic-auth credentials never travel plaintext otherwise).
+# Test fakes and deliberate LAN deployments only — never set it in production
+# Compose.
+#INTEGRATIONS_ALLOW_PRIVATE=1