Tizian 「ティツィアーン」
fd9c2dfe76
Meditate's deploy step (ADR 0038, step 7; ADR 0039, D14), as Todo's: the server's Dockerfile with the library's check compiled beside it, its production config on its own database and role, compose.meditate.yaml as a member of the register, its site sending /library/* to the web server and the rest to the API server, the operator's library read-only in a compose file of its own, and redeploy.sh, backup.sh and the image replay taking it in. Every server's public address now comes from .env (Serverpod's SERVERPOD_API_SERVER_PUBLIC_HOST and _WEB_SERVER_, which win over the config file): Train, Todo and Meditate from their domains, Learn from LEARN_PUBLIC_HOST, unset learn.halkyon.eu as before. Without it a server on halkyon.li would name halkyon.eu in its SimpleLogin callback, profile pages and privacy page. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
66 lines
2.7 KiB
YAML
66 lines
2.7 KiB
YAML
# Meditate's server beside the instance's other servers (ADR 0038, step 7),
|
|
# behind the instance's Caddy (deploy/compose.meditate.yaml): its API and its web server
|
|
# on the one domain, as Todo's; its database in the instance's PostgreSQL. The
|
|
# public host is the instance's, from deploy/.env (MEDITATE_DOMAIN), which overrides
|
|
# the one below.
|
|
|
|
# Configuration for the main API server.
|
|
apiServer:
|
|
port: 8080
|
|
publicHost: meditate.halkyon.eu
|
|
publicPort: 443
|
|
publicScheme: https
|
|
|
|
# No insightsServer, as Learn's: without the block Serverpod doesn't start Insights.
|
|
|
|
# Configuration for the web server.
|
|
webServer:
|
|
port: 8082
|
|
publicHost: meditate.halkyon.eu
|
|
publicPort: 443
|
|
publicScheme: https
|
|
|
|
# This is the database setup for your servers. The default for the Google Cloud
|
|
# Engine Terraform configuration is to connect on a private IP address.
|
|
# If you are connecting on a public IP (e.g. on AWS or Google Cloud Run), you
|
|
# connect on the public IP of the database e.g. database.examplepod.com.
|
|
database:
|
|
host: postgres
|
|
port: 5432
|
|
name: halkyon_meditate
|
|
user: halkyon_meditate
|
|
# On the instance's own network, never leaving the server.
|
|
requireSsl: false
|
|
#isUnixSocket: true # defaults to false
|
|
#maxConnectionCount: 10 # Defaults to 10, a negative or null value removes the limit
|
|
|
|
|
|
maxRequestSize: 524288 # The maximum size of requests allowed in bytes
|
|
|
|
# Session logs stay out of the database, for privacy, as Learn's (never re-enable).
|
|
sessionLogs:
|
|
consoleEnabled: false
|
|
persistentEnabled: false
|
|
# consoleLogFormat: json # Defaults to "json", options are "text" or "json"
|
|
|
|
#futureCall:
|
|
# enabled: true # Defaults to true, set to false to disable scheduling and running future calls
|
|
# executionEnabled: true # Defaults to true
|
|
# concurrencyLimit: 1 # Defaults to 1, a negative or null value removes the limit
|
|
# scanInterval: 5000 # Unit in milliseconds, defaults to 5000
|
|
|
|
# Recommended when serving web clients: keeps auth tokens in httpOnly
|
|
# cookies. Without this, web tokens live in JavaScript-readable storage,
|
|
# where any XSS can steal them. Web clients opt in with
|
|
# `client.cookieAuth = true`. Requires `allowedOrigins`; browsers from
|
|
# origins not in the list lose cross-origin access, including to public
|
|
# endpoints.
|
|
#authCookie:
|
|
# sameSite: lax # Defaults to "lax", options are "strict" or "none"
|
|
# #name: serverpod_auth # Defaults to "serverpod_auth"
|
|
# #refreshName: serverpod_auth_refresh # Defaults to "<name>_refresh"
|
|
# #domain: examplepod.com # Defaults to host-only; set to share across subdomains
|
|
# #path: / # Defaults to "/"
|
|
# #secure: true # Defaults to true; the cookie is only sent over https
|
|
#allowedOrigins:
|
|
# - https://app.examplepod.com # The origin serving your Flutter web app
|