vignesh/trypost
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
trypost/docker/.env.docker.example

170 lines
4.2 KiB
Text
Raw Normal View History

feat(docker): add multi-stage Dockerfile with dev and production targets Introduces a self-contained Docker build under docker/ that boots the full Laravel + Vite + Reverb + Horizon + scheduler stack inside a single container. The Dockerfile exposes two targets sharing a common system-base layer (PHP 8.4-FPM Alpine + Postgres/Redis/intl/sockets/redis extensions): - dev: bind-mount source at runtime, runs Vite via supervisord, hot reloads PHP via opcache.validate_timestamps=1, UID/GID build args align container writes with the host user. - production: ships the prebuilt application — composer --no-dev, npm run build + build:ssr, wayfinder TS pre-generated, OpCache hardened, fixed UID 1000. Sidecar configs (nginx, php.{dev,prod}.ini, supervisord.{dev,prod}.conf, entrypoint, postgres-init for the test DB) live next to the Dockerfile so the build context is self-describing. The entrypoint is idempotent and handles APP_KEY generation, migrations, storage:link, Passport keys, Wayfinder regen, and dependency reinstall on every boot.
2026-05-09 02:00:23 +00:00
APP_NAME="TryPost"
APP_ENV=local
APP_KEY=
APP_DEBUG=true
APP_URL=http://localhost:8000
# Self-hosted mode (skips payment requirements)
SELF_HOSTED=true
TELESCOPE_ENABLED=false
APP_LOCALE=en
APP_FALLBACK_LOCALE=en
APP_FAKER_LOCALE=en_US
APP_MAINTENANCE_DRIVER=file
BCRYPT_ROUNDS=12
LOG_CHANNEL=stack
LOG_STACK=single
LOG_DEPRECATIONS_CHANNEL=null
LOG_LEVEL=debug
# Database — service name "pgsql" inside the Compose network.
DB_CONNECTION=pgsql
DB_HOST=pgsql
DB_PORT=5432
DB_DATABASE=trypost
DB_USERNAME=postgres
DB_PASSWORD=password
# Session
SESSION_DRIVER=database
SESSION_LIFETIME=1440
SESSION_ENCRYPT=false
SESSION_PATH=/
SESSION_DOMAIN=null
# Broadcasting, Queue, Cache — all Redis-backed in Docker.
BROADCAST_CONNECTION=reverb
QUEUE_CONNECTION=redis
CACHE_STORE=redis
# File Storage — local-disk by default; switch to s3/r2 for production.
FILESYSTEM_DISK=local
# Redis — service name "redis" inside the Compose network.
REDIS_HOST=redis
REDIS_PASSWORD=null
REDIS_PORT=6379
# Mail — service name "mailpit" inside the Compose network. UI at :8025.
MAIL_MAILER=smtp
MAIL_HOST=mailpit
MAIL_PORT=1025
MAIL_USERNAME=null
MAIL_PASSWORD=null
MAIL_ENCRYPTION=null
MAIL_FROM_ADDRESS="hello@example.com"
MAIL_FROM_NAME="${APP_NAME}"
# Reverb (WebSockets) — host=localhost is browser-perspective via host port-forward.
REVERB_APP_ID=1001
REVERB_APP_KEY=trypost-reverb-key
REVERB_APP_SECRET=trypost-reverb-secret
REVERB_HOST=localhost
REVERB_PORT=8080
REVERB_SCHEME=http
# AWS S3 (set FILESYSTEM_DISK=s3)
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_DEFAULT_REGION=us-east-1
AWS_BUCKET=
AWS_URL=
# Cloudflare R2 (set FILESYSTEM_DISK=r2)
R2_ACCESS_KEY_ID=
R2_SECRET_ACCESS_KEY=
R2_ENDPOINT=
R2_REGION=auto
R2_BUCKET=
R2_URL=
# ============================================
# Social Platform Credentials (optional in dev)
# ============================================
LINKEDIN_CLIENT_ID=
LINKEDIN_CLIENT_SECRET=
LINKEDIN_CLIENT_REDIRECT="${APP_URL}/accounts/linkedin/callback"
LINKEDIN_PAGE_CLIENT_REDIRECT="${APP_URL}/accounts/linkedin-page/callback"
refactor(linkedin): drive OAuth scopes from LINKEDIN_SCOPES env via config Replace the additive LINKEDIN_EXTRA_SCOPES approach with a single full-override env var per flow, exploded into an array at the config layer (config/trypost.php -> platforms.linkedin{,-page}.scopes). This keeps env values as plain comma-separated strings, lets self-hosters override the entire set in one place, and removes the controller-side scope-merge logic. - config/trypost.php: explode LINKEDIN_SCOPES / LINKEDIN_PAGE_SCOPES into the scopes arrays (deprecated r_basicprofile stays out of the personal default) - LinkedInController: drop resolveScopes(), read config scopes directly - LinkedInPageController: drop the hardcoded $scopes property, read config scopes at both call sites - tests: drive the connect scope assertions from config overrides - .env.example, docker/.env.docker.example: document LINKEDIN_SCOPES and LINKEDIN_PAGE_SCOPES
2026-06-10 18:02:00 +00:00
# Optional: comma-separated OAuth scopes for each LinkedIn connect flow.
# Override these only if your LinkedIn dev app has legacy/enterprise products
# approved — e.g. add `r_basicprofile` to the personal set to re-enable the
# vanityName lookup via /v2/me. Leave unset to use the safe defaults.
# LINKEDIN_SCOPES="openid,profile,email,w_member_social"
# LINKEDIN_PAGE_SCOPES="openid,profile,email,w_organization_social,r_organization_social,rw_organization_admin,w_member_social"
feat(docker): add multi-stage Dockerfile with dev and production targets Introduces a self-contained Docker build under docker/ that boots the full Laravel + Vite + Reverb + Horizon + scheduler stack inside a single container. The Dockerfile exposes two targets sharing a common system-base layer (PHP 8.4-FPM Alpine + Postgres/Redis/intl/sockets/redis extensions): - dev: bind-mount source at runtime, runs Vite via supervisord, hot reloads PHP via opcache.validate_timestamps=1, UID/GID build args align container writes with the host user. - production: ships the prebuilt application — composer --no-dev, npm run build + build:ssr, wayfinder TS pre-generated, OpCache hardened, fixed UID 1000. Sidecar configs (nginx, php.{dev,prod}.ini, supervisord.{dev,prod}.conf, entrypoint, postgres-init for the test DB) live next to the Dockerfile so the build context is self-describing. The entrypoint is idempotent and handles APP_KEY generation, migrations, storage:link, Passport keys, Wayfinder regen, and dependency reinstall on every boot.
2026-05-09 02:00:23 +00:00
X_CLIENT_ID=
X_CLIENT_SECRET=
X_CLIENT_REDIRECT="${APP_URL}/accounts/x/callback"
TIKTOK_CLIENT_ID=
TIKTOK_CLIENT_SECRET=
TIKTOK_CLIENT_REDIRECT="${APP_URL}/accounts/tiktok/callback"
FACEBOOK_CLIENT_ID=
FACEBOOK_CLIENT_SECRET=
FACEBOOK_CLIENT_REDIRECT="${APP_URL}/accounts/facebook/callback"
INSTAGRAM_CLIENT_ID=
INSTAGRAM_CLIENT_SECRET=
INSTAGRAM_CLIENT_REDIRECT="${APP_URL}/accounts/instagram/callback"
THREADS_CLIENT_ID=
THREADS_CLIENT_SECRET=
THREADS_CLIENT_REDIRECT="${APP_URL}/accounts/threads/callback"
GOOGLE_AUTH_ENABLED=false
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_CLIENT_REDIRECT="${APP_URL}/accounts/youtube/callback"
GOOGLE_AUTH_CALLBACK="${APP_URL}/auth/google/callback"
GITHUB_AUTH_ENABLED=false
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
GITHUB_AUTH_CALLBACK="${APP_URL}/auth/github/callback"
PINTEREST_CLIENT_ID=
PINTEREST_CLIENT_SECRET=
PINTEREST_CLIENT_REDIRECT="${APP_URL}/accounts/pinterest/callback"
# AI Services
OPENAI_API_KEY=
ANTHROPIC_API_KEY=
GEMINI_API_KEY=
ELEVENLABS_API_KEY=
AI_TEXT_PROVIDER=openai
AI_TEXT_MODEL=gpt-5.4
AI_IMAGE_PROVIDER=openai
AI_AUDIO_PROVIDER=elevenlabs
# Telemetry — disabled by default in Docker dev.
NIGHTWATCH_ENABLED=false
NIGHTWATCH_TOKEN=
# Media Services
UNSPLASH_ACCESS_KEY=
UNSPLASH_SECRET_KEY=
GIPHY_API_KEY=
# Analytics (optional)
GTM_ID=
POSTHOG_ENABLED=false
POSTHOG_API_KEY=
POSTHOG_HOST=https://us.i.posthog.com
# Vite
VITE_APP_NAME="${APP_NAME}"
VITE_REVERB_APP_KEY="${REVERB_APP_KEY}"
VITE_REVERB_HOST="${REVERB_HOST}"
VITE_REVERB_PORT="${REVERB_PORT}"
VITE_REVERB_SCHEME="${REVERB_SCHEME}"
VITE_POSTHOG_ENABLED="${POSTHOG_ENABLED}"
VITE_POSTHOG_API_KEY="${POSTHOG_API_KEY}"
VITE_POSTHOG_HOST="${POSTHOG_HOST}"
Reference in a new issue Copy permalink