maping/env.sample at main · arhuman/maping · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
# mAPI-ng environment template. Copy to .env and adjust:
# cp env.sample .env
# `make local` reads it for the laptop stack, `make up` for the production stack.
# .env is gitignored; never commit real secrets.

# ---------------------------------------------------------------------------
# Host ports — published only by the local overlay (docker-compose.local.yml).
# The production overlay publishes just the server port; infra stays internal.
# ---------------------------------------------------------------------------
MAPING_PORT=8080 # dashboard + ingest -> http://localhost:8080
MAPING_CH_HTTP_PORT=8123 # ClickHouse HTTP
MAPING_CH_NATIVE_PORT=9000 # ClickHouse native
MAPING_PG_PORT=15432 # Postgres

# ---------------------------------------------------------------------------
# Data plane — ClickHouse (required). Creds seed the container; the DSN (used by
# the server) must stay in sync with them. Host is the `clickhouse` service.
# ---------------------------------------------------------------------------
MAPING_CH_DB=maping
MAPING_CH_USER=maping
MAPING_CH_PASSWORD=maping
MAPING_CLICKHOUSE_DSN=clickhouse://maping:maping@clickhouse:9000/maping

# ---------------------------------------------------------------------------
# Server ingest — optional. Pre-auth HTTP body cap (hard memory-safety ceiling,
# enforced before the tenant is known). Default 4 MiB; invalid/<=0 is ignored.
# ---------------------------------------------------------------------------
# MAPING_MAX_BODY_BYTES=4194304

# ---------------------------------------------------------------------------
# Control plane — Postgres. Optional in dev, required in prod.
# DSN empty -> auth OFF: single dev tenant, dashboard open at / (simplest dev)
# DSN set -> multi-tenant auth. Without OIDC creds below you get the
# dev-login button; with them, real GitHub/Google login.
# Creds seed the container; keep the DSN in sync. Host is the `postgres` service.
# ---------------------------------------------------------------------------
MAPING_PG_DB=maping
MAPING_PG_USER=maping
MAPING_PG_PASSWORD=maping
# MAPING_POSTGRES_DSN=postgres://maping:maping@postgres:5432/maping?sslmode=disable

# ---------------------------------------------------------------------------
# Dashboard auth — only read when MAPING_POSTGRES_DSN is set.
# ---------------------------------------------------------------------------
MAPING_BASE_URL=http://localhost:8080
# Session cookie signing key, >= 32 bytes. Keep stable across restarts and
# across every instance of a multi-instance deployment, or sessions are lost.
MAPING_SESSION_KEY=
# OIDC providers. Set at least one for real login (disables the dev-login bypass).
# Register the callback URL <MAPING_BASE_URL>/auth/{github|google}/callback.
MAPING_OIDC_GITHUB_CLIENT_ID=
MAPING_OIDC_GITHUB_CLIENT_SECRET=
MAPING_OIDC_GOOGLE_CLIENT_ID=
MAPING_OIDC_GOOGLE_CLIENT_SECRET=