Prepare QSfera production release

2026-06-08 19:57:40 +03:00
parent 2315f25754
commit 43caef7a6a
27 changed files with 1159 additions and 42 deletions
@@ -0,0 +1,49 @@
+## Production-safe qsfera_full environment template.
+## Copy to .env and fill every placeholder before running docker compose.
+
+COMPOSE_PATH_SEPARATOR=:
+QSFERA=:qsfera.yml
+
+## Public deployment identity.
+OC_DOMAIN=<cloud.example.com>
+TRAEFIK_ACME_MAIL=<admin@example.com>
+
+## Use the production image and pin a release tag for repeatable rollouts.
+OC_DOCKER_IMAGE=qsfera/qsfera
+OC_DOCKER_TAG=<release-tag>
+
+## Production must validate TLS certificates and must not create demo users.
+INSECURE=false
+DEMO_USERS=false
+
+## Required by qsfera.yml.
+ADMIN_PASSWORD=<replace-with-strong-password>
+
+## Optional: enable Keycloak-backed production identity.
+## Uncomment KEYCLOAK and fill all values before enabling it.
+#KEYCLOAK=:keycloak.yml
+KEYCLOAK_DOMAIN=<keycloak.example.com>
+KEYCLOAK_REALM=qsfera
+KEYCLOAK_POSTGRES_PASSWORD=<replace-with-strong-password>
+KEYCLOAK_ADMIN_USER=<replace-with-admin-user>
+KEYCLOAK_ADMIN_PASSWORD=<replace-with-strong-password>
+
+## Optional: enable S3-backed user storage.
+## Uncomment DECOMPOSEDS3 and fill all values before enabling it.
+#DECOMPOSEDS3=:decomposeds3.yml
+DECOMPOSEDS3_ENDPOINT=<https://s3.example.com>
+DECOMPOSEDS3_REGION=<region>
+DECOMPOSEDS3_ACCESS_KEY=<replace-with-access-key>
+DECOMPOSEDS3_SECRET_KEY=<replace-with-secret-key>
+DECOMPOSEDS3_BUCKET=<bucket>
+
+## Optional: local MinIO is intended for test/lab installs, not public production.
+#DECOMPOSEDS3_MINIO=:minio.yml
+#MINIO_DOMAIN=<minio.example.com>
+
+## Optional: use host paths for backup-friendly config and data storage.
+#OC_CONFIG_DIR=/srv/qsfera/config
+#OC_DATA_DIR=/srv/qsfera/data
+
+## Keep this last: it assembles the selected compose files.
+COMPOSE_FILE=docker-compose.yml${QSFERA:-}${DECOMPOSEDS3:-}${DECOMPOSEDS3_MINIO:-}${KEYCLOAK:-}