From d809d86182ab802472ae7d5e74cab66ba7bfa397 Mon Sep 17 00:00:00 2001 From: Doan Luu Duc Tai Date: Sat, 31 Oct 2026 07:39:18 -0500 Subject: Package private chat for HTTPS and verify portable encrypted recovery --- .env.example | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to '.env.example') diff --git a/.env.example b/.env.example index 521bcd8..de820ba 100644 --- a/.env.example +++ b/.env.example @@ -21,10 +21,13 @@ GIT_HOST=git.doan.luuduct.ai SEARCH_HOST=search.doan.luuduct.ai WKD_HOST=openpgpkey.luuduct.ai CHAT_HOST=chat.doan.luuduct.ai +CHAT_LOCAL_HOST=chat.localhost # Production TCP HTTP and TCP/UDP HTTPS listener/published ports. # Keep 80/443 for ordinary public HTTPS and ACME validation. Nonstandard ports # also require matching external routing and a suitable certificate setup. +# IPv6 :: publishes on IPv4 and IPv6; use 127.0.0.1 for isolated staging. +WEB_BIND=:: HTTP_PORT=80 HTTPS_PORT=443 @@ -36,8 +39,10 @@ LOCAL_HTTP_PORT=8080 # The bundled cgit and SearXNG images listen internally on 8080. CGIT_UPSTREAM=cgit:8080 SEARXNG_UPSTREAM=searxng:8080 +CHAT_UPSTREAM=chat:8080 -# Chat remains a separate local experimental process. --bind overrides CHAT_BIND. +# Direct development process only. Container origins come from the selected +# public HTTPS host or local chat.localhost gateway. --bind overrides CHAT_BIND. # CHAT_ORIGIN must match the browser's exact origin; existing identity files pin it. # Changing an origin is not a private-key or identity-file migration. CHAT_BIND=127.0.0.1:9080 -- cgit v1.2.3