-
Notifications
You must be signed in to change notification settings - Fork 102
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
80 changed files
with
2,416 additions
and
477 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -64,6 +64,7 @@ | |
| # - "deleteRecord" | ||
| # - "editRecord" | ||
| # - "exportMail" | ||
| # - "downloadAsync" | ||
| # - "exposeUpload" | ||
| # - "exportFtp" | ||
| # - "mainQueue" | ||
|
|
@@ -105,7 +106,7 @@ | |
| # Example with all profiles: | ||
| # - COMPOSE_FILE=docker-compose.yml:docker-compose.datastores.yml:docker-compose.tools.yml | ||
| # - COMPOSE_PROFILES=app,setup,gateway-classic,db,elasticsearch,redis,redis-session,rabbitmq,pma,mailhog,assetsInjest,createRecord,deleteRecord,editRecord, | ||
| # exportMail,exposeUpload,exportFtp,mainQueue,populateIndex,pullAssets,recordsActions,subdefCreation, | ||
| # exportMail,downloadAsync,exposeUpload,exportFtp,mainQueue,populateIndex,pullAssets,recordsActions,subdefCreation, | ||
| # validationReminder,webhook,writeMetadatas,shareBasket,scheduler,elk,db-backup,phraseanet-saml-sp | ||
| # | ||
|
|
||
|
|
@@ -145,9 +146,11 @@ STACK_NAME= | |
| # Phrasea network Name, the name of Phrasea network and see by traefik | ||
| # @run | ||
| PHRASEA_NETWORK_NAME=ps_internal | ||
|
|
||
| # @run | ||
| PHRASEA_DOMAIN=phrasea.local | ||
| # @run | ||
| PHRASEA_GATEWAY_IP=172.30.0.1 | ||
| # @run | ||
| PHRASEA_COMPOSE_PROJECT_NAME=ps | ||
|
|
||
|
|
||
|
|
@@ -180,13 +183,15 @@ PHRASEANET_MAINTENANCE=0 | |
| # Activate restrictions | ||
| # restrictions can be based | ||
| # on IP and/or password | ||
| # @run | ||
| # configuration exemple : | ||
| # GATEWAY_ALLOWED_IPS=10.0.0.1,10.0.1.1 | ||
| # GATEWAY_DENIED_IPS=172.1.0.1,172.1.0.2 | ||
| # GATEWAY_USERS="user1:password1,user2:password2" | ||
| # @run | ||
| GATEWAY_ALLOWED_IPS= | ||
| # @run | ||
| GATEWAY_DENIED_IPS= | ||
| # @run | ||
| GATEWAY_USERS= | ||
|
|
||
| # https and reverse proxy (on/off) | ||
|
|
@@ -196,8 +201,8 @@ GATEWAY_FASTCGI_HTTPS=off | |
|
|
||
| # Content Security Policy (CSP) | ||
| # security that helps to detect and mitigate certain types of attacks, including Cross-Site Scripting | ||
| ## @run | ||
| GATEWAY_CSP="default-src 'self' 127.0.0.1 https://apiws.carrick-skills.com:8443 https://apiws.carrick-flow.com:8443 https://fonts.gstatic.com *.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com *.axept.io *.matomo.cloud *.newrelic.com *.nr-data.net https://www.googletagmanager.com *.google-analytics.com *.phrasea.io https://apiws.carrick-flow.com:8443 https://apiws.carrick-skills.com:8443 https://maxcdn.bootstrapcdn.com data: ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.gstatic.com *.alchemyasp.com *.axept.io *.matomo.cloud *.newrelic.com https://www.googletagmanager.com https://apiws.carrick-flow.com:8443 https://apiws.carrick-skills.com:8443 https://maxcdn.bootstrapcdn.com data: blob: ; style-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://fonts.googleapis.com https://www.google.com https://www.gstatic.com https://apiws.carrick-flow.com:8443 https://apiws.carrick-skills.com:8443 https://maxcdn.bootstrapcdn.com ; img-src 'self' data: blob: *.tiles.mapbox.com https://axeptio.imgix.net *.cloudfront.net *.phrasea.io *.amazonaws.com https://apiws.carrick-flow.com:8443 https://apiws.carrick-skills.com:8443 https://maxcdn.bootstrapcdn.com https://www.gnu.org/graphics/ ; object-src 'self'; frame-ancestors 'self'" | ||
| # @run | ||
| GATEWAY_CSP="default-src 'self' 127.0.0.1 https://sockjs-eu.pusher.com:443 wss://ws-eu.pusher.com https://apiws.carrick-skills.com:8443 https://apiws.carrick-flow.com:8443 https://fonts.gstatic.com *.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com *.axept.io *.matomo.cloud *.newrelic.com *.nr-data.net https://www.googletagmanager.com *.google-analytics.com *.phrasea.io https://apiws.carrick-flow.com:8443 https://apiws.carrick-skills.com:8443 data: ;script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.gstatic.com *.alchemyasp.com *.axept.io *.matomo.cloud *.newrelic.com https://www.googletagmanager.com https://apiws.carrick-flow.com:8443 https://apiws.carrick-skills.com:8443 ;style-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://fonts.googleapis.com https://www.google.com https://www.gstatic.com https://apiws.carrick-flow.com:8443 https://apiws.carrick-skills.com:8443;img-src 'self' data: blob: *.tiles.mapbox.com https://axeptio.imgix.net *.cloudfront.net *.phrasea.io *.amazonaws.com https://apiws.carrick-flow.com:8443 https://apiws.carrick-skills.com:8443 ; object-src 'self';frame-ancestors 'self'" | ||
|
|
||
| # --- RabbitMQ settings ------------------------------------------------------------------------------------------------ | ||
|
|
||
|
|
@@ -291,46 +296,54 @@ PHP_LOG_LEVEL=warning | |
|
|
||
| # PHP Handler used to store/retrieve data. | ||
| # http://php.net/session.save-handler | ||
| # session handler can be "files" and path must be than | ||
| # session handler can be "files" and path must be than | ||
| # @run | ||
| SESSION_SAVE_HANDLER=redis | ||
| # @run | ||
| SESSION_SAVE_PATH=tcp://redis-session:6379 | ||
|
|
||
| # PHP session cookies to be secured | ||
| #only works if the application is under ssl protection | ||
| # only works if the application is under ssl protection | ||
| # @run | ||
| COOKIE_SECURE=false | ||
|
|
||
| # FPM | ||
| # Choose how the process manager will control the number of child processes. | ||
| # Possible Values: | ||
| # static - a fixed number (pm.max_children) of child processes; | ||
| # dynamic - the number of child processes are set dynamically based on the | ||
| # @run | ||
| FPM_PM_TYPE=dynamic | ||
|
|
||
| # FPM | ||
| # The number of child processes to be created when pm is set to 'static' and the | ||
| # maximum number of child processes when pm is set to 'dynamic' or 'ondemand'. | ||
| # @run | ||
| FPM_MAXCHILDREN=9 | ||
|
|
||
| # FPM | ||
| # The number of child processes created on startup. | ||
| # Note: Used only when pm is set to 'dynamic' | ||
|
|
||
| # @run | ||
| FPM_STARTSERVERS=3 | ||
|
|
||
| # FPM | ||
| # The desired minimum number of idle server processes. | ||
| # Note: Used only when pm is set to 'dynamic' | ||
| # Note: Mandatory when pm is set to 'dynamic' | ||
| # @run | ||
| FPM_MINSPARESERVER=2 | ||
|
|
||
| # FPM | ||
| # The desired maximum number of idle server processes. | ||
| # Note: Used only when pm is set to 'dynamic' | ||
| # Note: Mandatory when pm is set to 'dynamic' | ||
| # @run | ||
| FPM_MAXSPARESERVER=4 | ||
|
|
||
| # FPM | ||
| # The number of requests each child process should execute before respawning. | ||
| # @run | ||
| FPM_MAX_REQUESTS=1000 | ||
|
|
||
| # --- MySQL settings --------------------------------------------------------------------------------------------------- | ||
|
|
@@ -414,14 +427,31 @@ DB_BACKUP_CRON_TIME= | |
| DB_BACKUP_GZIP_LEVEL=9 | ||
|
|
||
|
|
||
| # --- Pusher settings -------------------------------------------------------------------------------------- | ||
|
|
||
| # Pusher settings used when PHRASEANET_DOWNLOAD_ASYNC=true (configuration.yml: download_async / enabled=true) | ||
|
|
||
| # pusher key | ||
| # @run | ||
| PUSHER_AUTH_KEY | ||
|
|
||
| # pusher secret | ||
| # @run | ||
| PUSHER_SECRET | ||
|
|
||
| # pusher app_id | ||
| # @run | ||
| PUSHER_APP_ID | ||
|
|
||
|
|
||
| # --- Application cache settings --------------------------------------------------------------------------------------------------- | ||
|
|
||
| # Cache setting type can be "redis" or "arraycache" | ||
| # @run | ||
| # @install | ||
|
|
||
| PHRASEANET_CACHE_TYPE=redis | ||
| # @run | ||
| PHRASEANET_CACHE_HOST=redis | ||
| # @run | ||
| PHRASEANET_CACHE_PORT=6379 | ||
|
|
||
| # --- Phraseanet general settings -------------------------------------------------------------------------------------- | ||
|
|
@@ -445,9 +475,10 @@ PHRASEANET_PROJECT_NAME=Phraseanet | |
| # An non declarative variable is generated for other uses needed for deploiment (helm for exemple) | ||
| # Domain name used by traefik in Phrasea stack | ||
| # @run | ||
| # @install | ||
| PHRASEANET_HOSTNAME=phraseanet.phrasea.local | ||
| # @run | ||
| PHRASEANET_SCHEME=http | ||
| # @run | ||
| PHRASEANET_APP_PORT=8082 | ||
|
|
||
| # Variables below used to define the first user / email couple : | ||
|
|
@@ -463,6 +494,9 @@ [email protected] | |
| # @run | ||
| PHRASEANET_ADMIN_ACCOUNT_PASSWORD=iJRqXU0MwbyJewQLBbra6IWHsWly | ||
|
|
||
| # Use Pusher to enable async download. | ||
| # @run | ||
| PHRASEANET_DOWNLOAD_ASYNC=false | ||
|
|
||
|
|
||
| # --- Phraseanet MySQL settings ---------------------------------------------------------------------------------------- | ||
|
|
@@ -548,22 +582,34 @@ PHRASEANET_RABBITMQ_VHOST=/ | |
| PHRASEANET_RABBITMQ_HEARTBEAT=30 | ||
|
|
||
| # --- Phraseanet Elasticsearch settings ------------------------------------------------------------------------------------- | ||
|
|
||
| # @setup | ||
|
|
||
| # They env variables are only used during installation process, edit configuration.yml file or use phraseanet admin GUI to modify them | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_HOST=elasticsearch | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_PORT=9200 | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_INDEX=null | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_SHARD=3 | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_REPLICAS=0 | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_MINSCORE=2 | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_HIGHLIGHT=true | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_MAXRESULTWINDOW=500000 | ||
| PHRASEANET_ELASTICSEARCH_POPULATEORDER=MODIFICATION_DATE | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_POPULATEORDER=RECORD_ID | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_ACTIVETAB=null | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_FACET_BASE=10 | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_FACET_COLLECTION=10 | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_FACET_DOCTYPE=10 | ||
| # @install | ||
| PHRASEANET_ELASTICSEARCH_FACET_ORIENTATION=10 | ||
|
|
||
|
|
||
|
|
@@ -686,6 +732,9 @@ PHRASEANET_WORKER_editRecord=2 | |
| # @run | ||
| PHRASEANET_WORKER_exportMail=2 | ||
|
|
||
| # @run | ||
| PHRASEANET_WORKER_downloadAsync=2 | ||
|
|
||
| # @run | ||
| PHRASEANET_WORKER_exposeUpload=2 | ||
|
|
||
|
|
@@ -905,22 +954,30 @@ PHRASEANET_FTP_DIR=./datas/ftp | |
| # | ||
|
|
||
| # For dev who don't have SSH_AUTH_SOCK (avoid an empty volume name) | ||
| # @run | ||
| SSH_AUTH_SOCK=/dev/null | ||
|
|
||
| # Kubernet context needs full pod hosname on nginx reverse proxing | ||
| # This is need for PHraseanet SAML context on K8S | ||
| # @run | ||
| PHRASEANET_K8S_NAMESPACE= | ||
|
|
||
| # | ||
| # SAML Service provider setting | ||
| # simplesamlphp as service provider for Phraseanet | ||
| # must be associated to a plugin | ||
| # on docker-compose staxk add the profile phraseanet-saml-sp | ||
|
|
||
| # @run | ||
| SAML_ALLOW_DEBUG=true | ||
| # @run | ||
| SAML_PHRASEANET_HOST=http://127.0.0.1:8082 | ||
| # @run | ||
| SAML_SP_CONFIG_DIR=./saml-config/ | ||
| # @run | ||
| SAML_SP_AUTHSOURCES= | ||
| # @run | ||
| SAML_SP_CERT_DIR=./saml-cert/ | ||
| # @run | ||
| SAML_IDP_METADATA_CONFIG= | ||
| # @run | ||
| SAML_IDP_METADATA_LOCAL_CONFIG_DIR=./saml-metadata/ | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.