|
|
|
# This is a sample configuration file. You can generate your configuration
|
|
|
|
# with the `rake mastodon:setup` interactive setup wizard, but to customize
|
|
|
|
# your setup even further, you'll need to edit it manually. This sample does
|
|
|
|
# not demonstrate all available configuration options. Please look at
|
|
|
|
# https://docs.joinmastodon.org/admin/config/ for the full documentation.
|
|
|
|
|
|
|
|
# Note that this file accepts slightly different syntax depending on whether
|
|
|
|
# you are using `docker-compose` or not. In particular, if you use
|
|
|
|
# `docker-compose`, the value of each declared variable will be taken verbatim,
|
|
|
|
# including surrounding quotes.
|
|
|
|
# See: https://github.com/mastodon/mastodon/issues/16895
|
|
|
|
|
|
|
|
# Federation
|
|
|
|
# ----------
|
|
|
|
# This identifies your server and cannot be changed safely later
|
|
|
|
# ----------
|
|
|
|
LOCAL_DOMAIN=social.hackerspace.zone
|
|
|
|
#WEB_DOMAIN=social.example.com
|
|
|
|
|
|
|
|
# Redis
|
|
|
|
# -----
|
|
|
|
REDIS_HOST=redis
|
|
|
|
REDIS_PORT=6379
|
|
|
|
|
|
|
|
# PostgreSQL
|
|
|
|
# ----------
|
|
|
|
DB_HOST=database
|
|
|
|
DB_USER=mastodon
|
|
|
|
DB_NAME=mastodon_production
|
|
|
|
DB_PASS=mastodon
|
|
|
|
DB_PORT=5432
|
|
|
|
|
|
|
|
# Elasticsearch (optional)
|
|
|
|
# ------------------------
|
|
|
|
ES_ENABLED=true
|
|
|
|
ES_HOST=es
|
|
|
|
ES_PORT=9200
|
|
|
|
# Authentication for ES (optional)
|
|
|
|
ES_USER=elastic
|
|
|
|
ES_PASS=password
|
|
|
|
|
|
|
|
# Secrets
|
|
|
|
# -------
|
|
|
|
# Make sure to use `rake secret` to generate secrets
|
|
|
|
# -------
|
|
|
|
# written to env.secrets
|
|
|
|
#SECRET_KEY_BASE=abcdef1234
|
|
|
|
#OTP_SECRET=99991234
|
|
|
|
|
|
|
|
# Web Push
|
|
|
|
# --------
|
|
|
|
# Generate with `rake mastodon:webpush:generate_vapid_key`
|
|
|
|
# --------
|
|
|
|
# written to env.secrets
|
|
|
|
#VAPID_PRIVATE_KEY=
|
|
|
|
#VAPID_PUBLIC_KEY=
|
|
|
|
|
|
|
|
# Sending mail
|
|
|
|
# ------------
|
|
|
|
SMTP_SERVER=smtp.mailgun.org
|
|
|
|
SMTP_PORT=587
|
|
|
|
SMTP_LOGIN=
|
|
|
|
SMTP_PASSWORD=
|
|
|
|
SMTP_FROM_ADDRESS=notifications@example.com
|
|
|
|
|
|
|
|
# File storage (optional)
|
|
|
|
# -----------------------
|
|
|
|
#S3_ENABLED=true
|
|
|
|
#S3_BUCKET=files.example.com
|
|
|
|
#AWS_ACCESS_KEY_ID=
|
|
|
|
#AWS_SECRET_ACCESS_KEY=
|
|
|
|
#S3_ALIAS_HOST=files.example.com
|
|
|
|
|
|
|
|
# do not allow normal logins
|
|
|
|
OMNIAUTH_ONLY=true
|
|
|
|
|
|
|
|
# OIDC supported since https://github.com/mastodon/mastodon/pull/16221
|
|
|
|
OIDC_ENABLED=true
|
|
|
|
OIDC_PROMPT=Keycloak
|
|
|
|
OIDC_DISPLAY_NAME=hackerspace.zone
|
|
|
|
OIDC_ISSUER=https://login.hackerspace.zone/realms/hackerspace
|
|
|
|
OIDC_REDIRECT_URI=https://social.hackerspace.zone/auth/auth/openid_connect/callback
|
|
|
|
OIDC_DISCOVERY=true
|
|
|
|
OIDC_SCOPE=openid,profile
|
|
|
|
OIDC_UID_FIELD=preferred_username
|
|
|
|
OIDC_CLIENT_ID=mastodon
|
|
|
|
OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED=true
|
|
|
|
# OIDC_CLIENT_SECRET is in env.secrets
|