Thomas Peterson
8daef8e98f
- DnsProvisioner (dependency-frei, cURL) legt pro Reseller *.<slug>.<portal> A-Record via Hetzner-Cloud-DNS-API an (deckt firma.reseller.portal ab, was der globale *.<portal>-Eintrag nicht kann) - ResellerDnsListener (Doctrine postPersist/preRemove), fail-soft, überspringt Plattform-Reseller - Env HCLOUD_DNS_TOKEN/HCLOUD_DNS_ZONE_NAME (leer = aus); Terraform reicht Cloud-Token + Zone an die App-Nodes durch (nur bei manage_dns) - Ziel-IP = APP_EDGE_IP oder DNS-Auflösung der Portal-Domain Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
94 lines
3.8 KiB
Bash
94 lines
3.8 KiB
Bash
# In all environments, the following files are loaded if they exist,
|
||
# the latter taking precedence over the former:
|
||
#
|
||
# * .env contains default values for the environment variables needed by the app
|
||
# * .env.local uncommitted file with local overrides
|
||
# * .env.$APP_ENV committed environment-specific defaults
|
||
# * .env.$APP_ENV.local uncommitted environment-specific overrides
|
||
#
|
||
# Real environment variables win over .env files.
|
||
#
|
||
# DO NOT DEFINE PRODUCTION SECRETS IN THIS FILE NOR IN ANY OTHER COMMITTED FILES.
|
||
# https://symfony.com/doc/current/configuration/secrets.html
|
||
#
|
||
# Run "composer dump-env prod" to compile .env files for production use (requires symfony/flex >=1.2).
|
||
# https://symfony.com/doc/current/best_practices.html#use-environment-variables-for-infrastructure-configuration
|
||
|
||
###> symfony/framework-bundle ###
|
||
APP_ENV=dev
|
||
APP_SECRET=
|
||
APP_SHARE_DIR=var/share
|
||
###< symfony/framework-bundle ###
|
||
|
||
###> symfony/routing ###
|
||
# Configure how to generate URLs in non-HTTP contexts, such as CLI commands.
|
||
# See https://symfony.com/doc/current/routing.html#generating-urls-in-commands
|
||
DEFAULT_URI=http://localhost
|
||
###< symfony/routing ###
|
||
|
||
###> nelmio/cors-bundle ###
|
||
CORS_ALLOW_ORIGIN='^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$'
|
||
###< nelmio/cors-bundle ###
|
||
|
||
###> doctrine/doctrine-bundle ###
|
||
# Format described at https://www.doctrine-project.org/projects/doctrine-dbal/en/latest/reference/configuration.html#connecting-using-a-url
|
||
# IMPORTANT: You MUST configure your server version, either here or in config/packages/doctrine.yaml
|
||
#
|
||
# DATABASE_URL="sqlite:///%kernel.project_dir%/var/data_%kernel.environment%.db"
|
||
# DATABASE_URL="mysql://app:!ChangeMe!@127.0.0.1:3306/app?serverVersion=8.0.32&charset=utf8mb4"
|
||
# DATABASE_URL="mysql://app:!ChangeMe!@127.0.0.1:3306/app?serverVersion=10.11.2-MariaDB&charset=utf8mb4"
|
||
DATABASE_URL="mysql://app:app@mariadb:3306/vcard4reseller?serverVersion=11.4.0-MariaDB&charset=utf8mb4"
|
||
###< doctrine/doctrine-bundle ###
|
||
|
||
###> lexik/jwt-authentication-bundle ###
|
||
JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
|
||
JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
|
||
JWT_PASSPHRASE=d75959918d9ccc5c89c62edbd6e6c6af82d6e2a3d303c53a6f3328e94a05b60a
|
||
###< lexik/jwt-authentication-bundle ###
|
||
|
||
###> App ###
|
||
# Portal-Domain (für On-Demand-TLS-Autorisierung). In Prod auf die echte Domain setzen.
|
||
APP_PORTAL_DOMAIN=localhost
|
||
# Reverse-Proxy, dem X-Forwarded-* vertraut wird. Dev: kein echter Proxy → leer.
|
||
# Prod (.env.prod.local): das private Netz von Caddy, z. B. 10.0.0.0/16.
|
||
TRUSTED_PROXIES=127.0.0.1
|
||
# Öffentliche IP der Caddy-Edge für Custom-Domain-Verifizierung. Optional:
|
||
# leer → es wird die DNS-Auflösung von APP_PORTAL_DOMAIN genutzt.
|
||
APP_EDGE_IP=
|
||
# Hetzner-Cloud-DNS-Automatik für Firmen-Subdomains (*.reseller.portal). Leer = aus.
|
||
HCLOUD_DNS_TOKEN=
|
||
HCLOUD_DNS_ZONE_NAME=
|
||
###< App ###
|
||
|
||
###> S3 / Object Storage (Druck-Assets) ###
|
||
# Lokal: MinIO. Prod: Hetzner Object Storage (Werte in .env.local / Server-Env setzen).
|
||
S3_ENDPOINT=http://minio:9000
|
||
S3_REGION=us-east-1
|
||
S3_BUCKET=card-assets
|
||
S3_KEY=minioadmin
|
||
S3_SECRET=minioadmin
|
||
S3_PATH_STYLE=true
|
||
###< S3 / Object Storage ###
|
||
|
||
###> symfony/messenger ###
|
||
# Choose one of the transports below
|
||
# MESSENGER_TRANSPORT_DSN=amqp://guest:guest@localhost:5672/%2f/messages
|
||
# MESSENGER_TRANSPORT_DSN=redis://localhost:6379/messages
|
||
MESSENGER_TRANSPORT_DSN=doctrine://default?auto_setup=0
|
||
###< symfony/messenger ###
|
||
|
||
###> Wallet-Pässe (Apple/Google) ###
|
||
# Apple Wallet (PassKit) – leer = deaktiviert. PEM-Dateien außerhalb des Webroots ablegen.
|
||
APPLE_WALLET_PASS_TYPE_ID=
|
||
APPLE_WALLET_TEAM_ID=
|
||
APPLE_WALLET_ORG_NAME=vcard4reseller
|
||
APPLE_WALLET_CERT_PATH=
|
||
APPLE_WALLET_KEY_PATH=
|
||
APPLE_WALLET_KEY_PASSWORD=
|
||
APPLE_WALLET_WWDR_PATH=
|
||
# Google Wallet – leer = deaktiviert.
|
||
GOOGLE_WALLET_ISSUER_ID=
|
||
GOOGLE_WALLET_SERVICE_ACCOUNT=
|
||
GOOGLE_WALLET_CLASS_SUFFIX=vcard_generic
|
||
###< Wallet-Pässe ###
|