michaelandClaude Fable 5.1
3aa7fb7b83
Deploy Waters Boards to AWS / deploy (push) Canceled after 0s
Replace the planned Synology deploy with one Lightsail box: Caddy in front of the app for automatic HTTPS (deploy/aws/docker-compose.yml, Caddyfile), a deploy script that rsyncs server/ and rebuilds in place without touching data/ or .env, and a Gitea workflow that runs the same script from the nas runner over SSH. README documents the box, DNS, .env, deploys and restore. Allow both church Google Workspace domains to sign in. Drop the NAS-only compose file. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
27 lines
1.0 KiB
Bash
27 lines
1.0 KiB
Bash
# Copy to .env next to docker-compose.yml and fill in. Never commit .env.
|
||
|
||
PORT=3100
|
||
|
||
# Google sign-in — the OAuth "Web application" client ID from Google Cloud Console.
|
||
# See README.md › "Set up Google sign-in". Leave empty to disable Google sign-in.
|
||
GOOGLE_CLIENT_ID=
|
||
|
||
# Only Google accounts on these domains can sign in (comma-separated). Both church
|
||
# domains are Google Workspace domains, so both are allowed by default.
|
||
ALLOWED_DOMAINS=waterschurch.org,waters.church
|
||
|
||
# These people are always admins (comma-separated). The very first person to sign in
|
||
# also becomes an admin.
|
||
ADMIN_EMAILS=you@waterschurch.org
|
||
|
||
# Optional break-glass password for the ADMIN_EMAILS accounts, for when Google sign-in
|
||
# is not set up yet or is broken. Use something long. Leave empty to disable.
|
||
ADMIN_PASSWORD=
|
||
|
||
# Name of the first workspace created on an empty database.
|
||
ORG_NAME=Waters Church
|
||
|
||
# Local development only: passwordless sign-in for any allowed-domain email.
|
||
# Ignored when NODE_ENV=production (which the Docker image sets).
|
||
# DEV_LOGIN=1
|