2026-10-21 20:31:05 +03:30
|
|
|
# Production settings for docker-compose.yml — copy to .env and change every secret.
|
|
|
|
|
# Generate secrets with: node -e "console.log(require('crypto').randomBytes(48).toString('base64url'))"
|
|
|
|
|
|
|
|
|
|
# domains (TLS is terminated in front of the gateway: host nginx, Traefik or the CDN)
|
|
|
|
|
SITE_DOMAIN=imenpishgaman.ir
|
|
|
|
|
ADMIN_DOMAIN=admin.imenpishgaman.ir
|
|
|
|
|
# host port of the gateway container
|
|
|
|
|
HTTP_PORT=8080
|
|
|
|
|
# reverse proxies in front of the API: gateway (1) + host TLS proxy (1)
|
|
|
|
|
TRUST_PROXY=2
|
|
|
|
|
# set to false only if the admin is served over plain http
|
|
|
|
|
COOKIE_SECURE=true
|
|
|
|
|
|
|
|
|
|
# database
|
|
|
|
|
POSTGRES_USER=imen
|
|
|
|
|
POSTGRES_PASSWORD=change-me
|
|
|
|
|
POSTGRES_DB=imen
|
|
|
|
|
|
|
|
|
|
# object storage (MinIO container); bucket is created automatically
|
|
|
|
|
S3_BUCKET=imen-media
|
|
|
|
|
S3_ACCESS_KEY=imen
|
|
|
|
|
S3_SECRET_KEY=change-me-at-least-8-chars
|
|
|
|
|
|
|
|
|
|
# auth + cache purge secrets
|
|
|
|
|
JWT_SECRET=change-me-48-random-bytes
|
|
|
|
|
REVALIDATE_SECRET=change-me-too
|
|
|
|
|
|
|
|
|
|
# first admin user (created by: docker compose exec api node dist/seed/seed.js)
|
2026-10-22 17:18:17 +03:30
|
|
|
ADMIN_PHONE=09120000000
|
2026-10-21 20:31:05 +03:30
|
|
|
ADMIN_PASSWORD=change-me
|
|
|
|
|
ADMIN_NAME=مدیر سایت
|
