tonym
1c66dbd481
Add an admin 'Pull & rebuild' button (Settings → Updates). It POSTs an admin-gated route that signals a privileged 'updater' sidecar (adnanh/webhook + docker socket) over the internal network with a shared secret; the sidecar runs 'git fetch && reset --hard origin/master && docker compose up -d --build app' detached. The UI polls /api/version until the rebuilt app returns on the new version, then reloads. Secret matching uses webhook -template + getenv so UPDATER_SECRET stays out of the repo (host .env only). No request data reaches the shell — the command is fixed in updater/update.sh. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
19 lines
757 B
Plaintext
19 lines
757 B
Plaintext
# Copy to .env and fill in values for local dev.
|
|
|
|
DATABASE_URL="postgresql://tonym@localhost:5432/moonbase_dev"
|
|
|
|
NEXTAUTH_SECRET="change-me-generate-with-openssl-rand-base64-32"
|
|
NEXTAUTH_URL="http://localhost:3000"
|
|
|
|
# Suggestions module — files feedback as issues on a Gitea repo.
|
|
# Leave blank to disable (the Suggestions page shows a "not set up" state).
|
|
GITEA_URL="http://192.168.0.5:3022"
|
|
GITEA_TOKEN=""
|
|
GITEA_REPO="bonna61/Moonbase"
|
|
|
|
# Self-update — the admin "Pull & rebuild" button signals the updater sidecar.
|
|
# UPDATER_SECRET is shared between the app and the updater (set in the host .env,
|
|
# never committed). UPDATER_URL points at the sidecar on the internal network.
|
|
UPDATER_URL="http://updater:9000/hooks/moonbase-update"
|
|
UPDATER_SECRET=""
|