diff options
| author | Doan Luu Duc Tai <doan@luuduct.ai> | 2026-10-31 07:39:18 -0500 |
|---|---|---|
| committer | Doan Luu Duc Tai <doan@luuduct.ai> | 2026-10-31 07:39:18 -0500 |
| commit | d809d86182ab802472ae7d5e74cab66ba7bfa397 (patch) | |
| tree | 36718e8d91b13b2714cbfe7877353ac7625f2f44 /.env.example | |
| parent | dd1d5863ef865ebe29dc93d03ca6abc0aaf48bee (diff) | |
Package private chat for HTTPS and verify portable encrypted recovery
Diffstat (limited to '.env.example')
| -rw-r--r-- | .env.example | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/.env.example b/.env.example index 521bcd8..de820ba 100644 --- a/.env.example +++ b/.env.example @@ -21,10 +21,13 @@ GIT_HOST=git.doan.luuduct.ai SEARCH_HOST=search.doan.luuduct.ai WKD_HOST=openpgpkey.luuduct.ai CHAT_HOST=chat.doan.luuduct.ai +CHAT_LOCAL_HOST=chat.localhost # Production TCP HTTP and TCP/UDP HTTPS listener/published ports. # Keep 80/443 for ordinary public HTTPS and ACME validation. Nonstandard ports # also require matching external routing and a suitable certificate setup. +# IPv6 :: publishes on IPv4 and IPv6; use 127.0.0.1 for isolated staging. +WEB_BIND=:: HTTP_PORT=80 HTTPS_PORT=443 @@ -36,8 +39,10 @@ LOCAL_HTTP_PORT=8080 # The bundled cgit and SearXNG images listen internally on 8080. CGIT_UPSTREAM=cgit:8080 SEARXNG_UPSTREAM=searxng:8080 +CHAT_UPSTREAM=chat:8080 -# Chat remains a separate local experimental process. --bind overrides CHAT_BIND. +# Direct development process only. Container origins come from the selected +# public HTTPS host or local chat.localhost gateway. --bind overrides CHAT_BIND. # CHAT_ORIGIN must match the browser's exact origin; existing identity files pin it. # Changing an origin is not a private-key or identity-file migration. CHAT_BIND=127.0.0.1:9080 |