iu
cb272398ce
- app_settings table (PostgreSQL migration 000010, SQLite 000002) - internal/settings repository (Get/Set/Ensure) wired into store.Repos - secret generated with crypto/rand on first start and persisted; reused on restart - drop required JWT_SECRET from env/config; app.New takes a TokenManager and storage.Open takes the resolved secret (URL_SECRET still overrides) - docs updated
49 lines
1.3 KiB
Bash
49 lines
1.3 KiB
Bash
# PostgreSQL (pg.localnet)
|
|
PG_HOST=pg.localnet
|
|
PG_PORT=5432
|
|
PG_USER=album
|
|
PG_PASSWORD=change_me
|
|
PG_DATABASE=shared_album
|
|
PG_SSLMODE=disable
|
|
|
|
# Metadata backend: sqlite (default, embedded single instance) or postgres
|
|
DB_BACKEND=sqlite
|
|
# Path to the SQLite database file (used when DB_BACKEND=sqlite)
|
|
SQLITE_PATH=./galo.db
|
|
|
|
# S3 (Garage on s3.localnet) - internal storage, never exposed to clients
|
|
S3_ENDPOINT=http://s3.localnet:3900
|
|
S3_REGION=garage
|
|
S3_ACCESS_KEY=GKchange_me
|
|
S3_SECRET_KEY=change_me
|
|
S3_BUCKET=galo-data
|
|
S3_USE_PATH_STYLE=true
|
|
|
|
# Storage backend: fs (default, local filesystem) or s3 (S3-compatible/Garage).
|
|
# Blobs are always delivered through the backend via /api/objects/<key>.
|
|
STORAGE_BACKEND=fs
|
|
# Root directory for object blobs (STORAGE_BACKEND=fs)
|
|
FS_ROOT=./data
|
|
# Signs object URLs; falls back to the metadata-layer secret when empty
|
|
URL_SECRET=
|
|
# Lifetime of signed object URLs
|
|
OBJECT_URL_TTL=1h
|
|
|
|
# Auth. The token signing secret is generated on first start and stored in the
|
|
# metadata layer (app_settings); it is not configured here.
|
|
JWT_ACCESS_TTL=15m
|
|
JWT_REFRESH_TTL=720h
|
|
|
|
# Server
|
|
HTTP_ADDR=:8080
|
|
APP_BASE_URL=http://localhost:8080
|
|
|
|
# SSE
|
|
SSE_HEARTBEAT_INTERVAL=25s
|
|
SSE_CLIENT_BUFFER=64
|
|
|
|
# Background worker (variant generation + object GC)
|
|
WORKER_INTERVAL=5s
|
|
WORKER_BATCH=10
|
|
WORKER_PENDING_TTL=10m
|