|
|
|
|
@ -13,11 +13,29 @@ DB_PORT=5432 |
|
|
|
|
|
|
|
|
|
DATABASE_URL=postgresql://$DATA_DB_USER:$DATA_DB_PASS@$DATA_DB_HOST/gonano |
|
|
|
|
|
|
|
|
|
# Optional ElasticSearch configuration |
|
|
|
|
# ES_ENABLED=true |
|
|
|
|
# ES_HOST=localhost |
|
|
|
|
# ES_PORT=9200 |
|
|
|
|
|
|
|
|
|
# Optimizations |
|
|
|
|
LD_PRELOAD=/data/lib/libjemalloc.so |
|
|
|
|
|
|
|
|
|
# ImageMagick optimizations |
|
|
|
|
MAGICK_TEMPORARY_PATH=/app/tmp |
|
|
|
|
MAGICK_MEMORY_LIMIT=128MiB |
|
|
|
|
MAGICK_MAP_LIMIT=64MiB |
|
|
|
|
MAGICK_TIME_LIMIT=15 |
|
|
|
|
MAGICK_AREA_LIMIT=16MP |
|
|
|
|
MAGICK_WIDTH_LIMIT=8KP |
|
|
|
|
MAGICK_HEIGHT_LIMIT=8KP |
|
|
|
|
|
|
|
|
|
# Federation |
|
|
|
|
# Note: Changing LOCAL_DOMAIN or LOCAL_HTTPS at a later time will cause unwanted side effects. |
|
|
|
|
# Note: Changing LOCAL_DOMAIN at a later time will cause unwanted side effects, including breaking all existing federation. |
|
|
|
|
# LOCAL_DOMAIN should *NOT* contain the protocol part of the domain e.g https://example.com. |
|
|
|
|
LOCAL_DOMAIN=${APP_NAME}.nanoapp.io |
|
|
|
|
LOCAL_HTTPS=false |
|
|
|
|
|
|
|
|
|
# Changing LOCAL_HTTPS in production is no longer supported. (Mastodon will always serve https:// links) |
|
|
|
|
|
|
|
|
|
# Use this only if you need to run mastodon on a different domain than the one used for federation. |
|
|
|
|
# You can read more about this option on https://github.com/tootsuite/documentation/blob/master/Running-Mastodon/Serving_a_different_domain.md |
|
|
|
|
@ -31,7 +49,6 @@ LOCAL_HTTPS=false |
|
|
|
|
|
|
|
|
|
# Application secrets |
|
|
|
|
# Generate each with the `rake secret` task (`nanobox run bundle exec rake secret`) |
|
|
|
|
PAPERCLIP_SECRET=$PAPERCLIP_SECRET |
|
|
|
|
SECRET_KEY_BASE=$SECRET_KEY_BASE |
|
|
|
|
OTP_SECRET=$OTP_SECRET |
|
|
|
|
|
|
|
|
|
@ -131,9 +148,79 @@ SMTP_FROM_ADDRESS=notifications@${APP_NAME}.nanoapp.io |
|
|
|
|
|
|
|
|
|
# Cluster number setting for streaming API server. |
|
|
|
|
# If you comment out following line, cluster number will be `numOfCpuCores - 1`. |
|
|
|
|
STREAMING_CLUSTER_NUM=1 |
|
|
|
|
# STREAMING_CLUSTER_NUM=1 |
|
|
|
|
|
|
|
|
|
# Docker mastodon user |
|
|
|
|
# If you use Docker, you may want to assign UID/GID manually. |
|
|
|
|
# UID=1000 |
|
|
|
|
# GID=1000 |
|
|
|
|
|
|
|
|
|
# LDAP authentication (optional) |
|
|
|
|
# LDAP_ENABLED=true |
|
|
|
|
# LDAP_HOST=localhost |
|
|
|
|
# LDAP_PORT=389 |
|
|
|
|
# LDAP_METHOD=simple_tls |
|
|
|
|
# LDAP_BASE= |
|
|
|
|
# LDAP_BIND_DN= |
|
|
|
|
# LDAP_PASSWORD= |
|
|
|
|
# LDAP_UID=cn |
|
|
|
|
|
|
|
|
|
# PAM authentication (optional) |
|
|
|
|
# PAM authentication uses for the email generation the "email" pam variable |
|
|
|
|
# and optional as fallback PAM_DEFAULT_SUFFIX |
|
|
|
|
# The pam environment variable "email" is provided by: |
|
|
|
|
# https://github.com/devkral/pam_email_extractor |
|
|
|
|
# PAM_ENABLED=true |
|
|
|
|
# Fallback Suffix for email address generation (nil by default) |
|
|
|
|
# PAM_DEFAULT_SUFFIX=pam |
|
|
|
|
# Name of the pam service (pam "auth" section is evaluated) |
|
|
|
|
# PAM_DEFAULT_SERVICE=rpam |
|
|
|
|
# Name of the pam service used for checking if an user can register (pam "account" section is evaluated) (nil (disabled) by default) |
|
|
|
|
# PAM_CONTROLLED_SERVICE=rpam |
|
|
|
|
|
|
|
|
|
# Global OAuth settings (optional) : |
|
|
|
|
# If you have only one strategy, you may want to enable this |
|
|
|
|
# OAUTH_REDIRECT_AT_SIGN_IN=true |
|
|
|
|
|
|
|
|
|
# Optional CAS authentication (cf. omniauth-cas) : |
|
|
|
|
# CAS_ENABLED=true |
|
|
|
|
# CAS_URL=https://sso.myserver.com/ |
|
|
|
|
# CAS_HOST=sso.myserver.com/ |
|
|
|
|
# CAS_PORT=443 |
|
|
|
|
# CAS_SSL=true |
|
|
|
|
# CAS_VALIDATE_URL= |
|
|
|
|
# CAS_CALLBACK_URL= |
|
|
|
|
# CAS_LOGOUT_URL= |
|
|
|
|
# CAS_LOGIN_URL= |
|
|
|
|
# CAS_UID_FIELD='user' |
|
|
|
|
# CAS_CA_PATH= |
|
|
|
|
# CAS_DISABLE_SSL_VERIFICATION=false |
|
|
|
|
# CAS_UID_KEY='user' |
|
|
|
|
# CAS_NAME_KEY='name' |
|
|
|
|
# CAS_EMAIL_KEY='email' |
|
|
|
|
# CAS_NICKNAME_KEY='nickname' |
|
|
|
|
# CAS_FIRST_NAME_KEY='firstname' |
|
|
|
|
# CAS_LAST_NAME_KEY='lastname' |
|
|
|
|
# CAS_LOCATION_KEY='location' |
|
|
|
|
# CAS_IMAGE_KEY='image' |
|
|
|
|
# CAS_PHONE_KEY='phone' |
|
|
|
|
|
|
|
|
|
# Optional SAML authentication (cf. omniauth-saml) |
|
|
|
|
# SAML_ENABLED=true |
|
|
|
|
# SAML_ACS_URL= |
|
|
|
|
# SAML_ISSUER=http://localhost:3000/auth/auth/saml/callback |
|
|
|
|
# SAML_IDP_SSO_TARGET_URL=https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO |
|
|
|
|
# SAML_IDP_CERT= |
|
|
|
|
# SAML_IDP_CERT_FINGERPRINT= |
|
|
|
|
# SAML_NAME_IDENTIFIER_FORMAT= |
|
|
|
|
# SAML_CERT= |
|
|
|
|
# SAML_PRIVATE_KEY= |
|
|
|
|
# SAML_SECURITY_WANT_ASSERTION_SIGNED=true |
|
|
|
|
# SAML_SECURITY_WANT_ASSERTION_ENCRYPTED=true |
|
|
|
|
# SAML_SECURITY_ASSUME_EMAIL_IS_VERIFIED=true |
|
|
|
|
# SAML_ATTRIBUTES_STATEMENTS_UID="urn:oid:0.9.2342.19200300.100.1.1" |
|
|
|
|
# SAML_ATTRIBUTES_STATEMENTS_EMAIL="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" |
|
|
|
|
# SAML_ATTRIBUTES_STATEMENTS_FULL_NAME="urn:oid:2.5.4.42" |
|
|
|
|
# SAML_UID_ATTRIBUTE="urn:oid:0.9.2342.19200300.100.1.1" |
|
|
|
|
# SAML_ATTRIBUTES_STATEMENTS_VERIFIED= |
|
|
|
|
# SAML_ATTRIBUTES_STATEMENTS_VERIFIED_EMAIL= |
|
|
|
|
|
Daniel Hunsaker
7 years ago
committed by