nicktrn
6535cf918b
* v4 helm chart * ignore packaged chart archives * chart publish prep * add helm chart release workflow * enable draft gh release * stateful services should be statefulsets * expose internal otel config * podAnnotations for all services * postgresql.extraArgs * postgresql -> postgres * add clickhouse vars as extraEnv examples * support external secrets * improve clickhouse config improve clickhouse config * disable internal otel config by default * allow nil internal config * fix gh release permission * fix validation step for ci * secrets.enabled * simplify secret keys * bump chart version * fix contents permission * remove redundant print steps * remove helm release heading * optimise clickhouse config * support wait-for-it.sh * fix ch overrides * add low-resource ch overrides to compose setup * supervisor bootstrap config * disable otel trace logging * retain shared volume * enable clickhouse for compose setup * disable trace logging * bump chart * add extraManifests * telemetry config * add repo namespace config * scope cluster role to namespace to support multiple installs * external s3 config * values tweaks * helm docs * bump chart * set contents read permission Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> * add object store root credentials warning * run init containers as uid 1000 * pass ch user creds with explicit flag * improve ingress anotation handling * remove duplicate colume claim block * trim htpasswd auth * lock curl images used for tests * add v4-beta package version warning * make schema and sslmode configurable * package tag info -> warning * improve secrets config example * update docs * bump version * bump webapp reqs to account for ch * make ch creds more easily configurable * publish ch http port * example point at latest beta chart * small docs tweaks --------- Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
130 lines
5.5 KiB
Bash
130 lines
5.5 KiB
Bash
# Trigger.dev self-hosting environment variables
|
|
# - These are the default values for the self-hosting stack
|
|
# - You should change them to suit your needs, especially the secrets
|
|
# - See the docs for more information: https://trigger.dev/docs/self-hosting/overview
|
|
|
|
# Secrets
|
|
# - Do NOT use these defaults in production
|
|
# - Generate your own by running `openssl rand -hex 16` for each secret
|
|
SESSION_SECRET=2818143646516f6fffd707b36f334bbb
|
|
MAGIC_LINK_SECRET=44da78b7bbb0dfe709cf38931d25dcdd
|
|
ENCRYPTION_KEY=f686147ab967943ebbe9ed3b496e465a
|
|
MANAGED_WORKER_SECRET=447c29678f9eaf289e9c4b70d3dd8a7f
|
|
|
|
# Worker token
|
|
# - This is the token for the worker to connect to the webapp
|
|
# - When running the combined stack, this is set automatically during bootstrap
|
|
# - For the split setup, you will have to set this manually. The token is available in the webapp logs but will only be shown once.
|
|
# - See the docs for more information: https://trigger.dev/docs/self-hosting/docker
|
|
# TRIGGER_WORKER_TOKEN=
|
|
|
|
# Worker URLs
|
|
# - In split setups, uncomment and set to the public URL of your webapp
|
|
# TRIGGER_API_URL=https://trigger.example.com
|
|
# OTEL_EXPORTER_OTLP_ENDPOINT=https://trigger.example.com/otel
|
|
|
|
# Postgres
|
|
# - Do NOT use these defaults in production
|
|
# - Especially if you decide to expose the database to the internet
|
|
# POSTGRES_USER=postgres
|
|
POSTGRES_PASSWORD=unsafe-postgres-pw
|
|
# POSTGRES_DB=postgres
|
|
DATABASE_URL=postgresql://postgres:unsafe-postgres-pw@postgres:5432/main?schema=public&sslmode=disable
|
|
DIRECT_URL=postgresql://postgres:unsafe-postgres-pw@postgres:5432/main?schema=public&sslmode=disable
|
|
|
|
# Trigger image tag
|
|
# - This is the version of the webapp and worker images to use, they should be locked to a specific version in production
|
|
# - For example: TRIGGER_IMAGE_TAG=v4.0.0-v4-beta.21
|
|
TRIGGER_IMAGE_TAG=v4-beta
|
|
|
|
# Webapp
|
|
# - These should generally be set to the same value
|
|
# - In production, these should be set to the public URL of your webapp, e.g. https://trigger.example.com
|
|
APP_ORIGIN=http://localhost:8030
|
|
LOGIN_ORIGIN=http://localhost:8030
|
|
API_ORIGIN=http://localhost:8030
|
|
DEV_OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:8030/otel
|
|
# You may need to set this when testing locally or when using the combined setup
|
|
# API_ORIGIN=http://webapp:3000
|
|
|
|
# Webapp - memory management
|
|
# - This sets the maximum memory allocation for Node.js heap in MiB (e.g. "4096" for 4GB)
|
|
# - It should be set according to your total webapp machine's memory or any container limits you have set
|
|
# - Setting this too high or low WILL cause crashes, inefficient memory utilization and high CPU usage
|
|
# - You should allow for some memory overhead, we suggest at least 20%, for example:
|
|
# - 2GB machine: NODE_MAX_OLD_SPACE_SIZE=1600
|
|
# - 4GB machine: NODE_MAX_OLD_SPACE_SIZE=3200
|
|
# - 6GB machine: NODE_MAX_OLD_SPACE_SIZE=4800
|
|
# - 8GB machine: NODE_MAX_OLD_SPACE_SIZE=6400
|
|
# NODE_MAX_OLD_SPACE_SIZE=8192
|
|
|
|
# ClickHouse
|
|
# - Do NOT use these defaults in production
|
|
CLICKHOUSE_USER=default
|
|
CLICKHOUSE_PASSWORD=password
|
|
CLICKHOUSE_URL=http://default:password@clickhouse:8123?secure=false
|
|
RUN_REPLICATION_CLICKHOUSE_URL=http://default:password@clickhouse:8123
|
|
|
|
# Docker Registry
|
|
# - When testing locally, the default values should be fine
|
|
# - When deploying to production, you will have to change these, especially the password and URL
|
|
# - See the docs for more information: https://trigger.dev/docs/self-hosting/docker#registry-setup
|
|
DOCKER_REGISTRY_URL=localhost:5000
|
|
DOCKER_REGISTRY_USERNAME=registry-user
|
|
DOCKER_REGISTRY_PASSWORD=very-secure-indeed
|
|
|
|
# Object store
|
|
# - You need to log into the Minio dashboard and create a bucket called "packets"
|
|
# - See the docs for more information: https://trigger.dev/docs/self-hosting/docker#object-storage
|
|
OBJECT_STORE_ACCESS_KEY_ID=admin
|
|
OBJECT_STORE_SECRET_ACCESS_KEY=very-safe-password
|
|
# You will have to uncomment and configure this for production
|
|
# OBJECT_STORE_BASE_URL=http://localhost:9000
|
|
# Credentials to access the Minio dashboard at http://localhost:9001
|
|
# - You should change these credentials and not use them for the `OBJECT_STORE_` env vars above
|
|
# - Instead, setup a non-root user with access the "packets" bucket
|
|
# MINIO_ROOT_USER=admin
|
|
# MINIO_ROOT_PASSWORD=very-safe-password
|
|
|
|
# Other image tags
|
|
# - These are the versions of the other images to use
|
|
# - You should lock these to a specific version in production
|
|
# POSTGRES_IMAGE_TAG=14
|
|
# REDIS_IMAGE_TAG=7
|
|
# ELECTRIC_IMAGE_TAG=1.0.13
|
|
# CLICKHOUSE_IMAGE_TAG=latest
|
|
# REGISTRY_IMAGE_TAG=2
|
|
# MINIO_IMAGE_TAG=latest
|
|
# DOCKER_PROXY_IMAGE_TAG=latest
|
|
# TRAEFIK_IMAGE_TAG=v3.4
|
|
|
|
# Publish IPs
|
|
# - These are the IPs to publish the services to
|
|
# - Setting to 127.0.0.1 makes the service only accessible locally
|
|
# - When deploying to production, you will have to change these, depending on your setup
|
|
# WEBAPP_PUBLISH_IP=0.0.0.0
|
|
# POSTGRES_PUBLISH_IP=127.0.0.1
|
|
# REDIS_PUBLISH_IP=127.0.0.1
|
|
# ELECTRIC_PUBLISH_IP=127.0.0.1
|
|
# CLICKHOUSE_PUBLISH_IP=127.0.0.1
|
|
# REGISTRY_PUBLISH_IP=127.0.0.1
|
|
# MINIO_PUBLISH_IP=127.0.0.1
|
|
|
|
# Restart policy
|
|
# - Applies to all services, adjust as needed
|
|
# RESTART_POLICY=unless-stopped
|
|
|
|
# Docker logging
|
|
# - See the official docs: https://docs.docker.com/engine/logging/configure/
|
|
# LOGGING_DRIVER=local
|
|
# LOGGING_MAX_SIZE=20m
|
|
# LOGGING_MAX_FILES=5
|
|
# LOGGING_COMPRESS=true
|
|
|
|
# Traefik
|
|
# - Reverse proxy settings only serve as an example and require further configuration
|
|
# - See the partial overrides in docker-compose.traefik.yml for more details
|
|
# TRAEFIK_ENTRYPOINT=websecure
|
|
# TRAEFIK_HTTP_PUBLISH_IP=0.0.0.0
|
|
# TRAEFIK_HTTPS_PUBLISH_IP=0.0.0.0
|
|
# TRAEFIK_DASHBOARD_PUBLISH_IP=127.0.0.1 |