mirror of
https://tangled.org/tranquil.farm/tranquil-pds
synced 2026-02-08 21:30:08 +00:00
119 lines
5.5 KiB
Plaintext
119 lines
5.5 KiB
Plaintext
# =============================================================================
|
|
# Server
|
|
# =============================================================================
|
|
SERVER_HOST=127.0.0.1
|
|
SERVER_PORT=3000
|
|
# The public-facing hostname of the PDS (used in DID documents, JWTs, etc.)
|
|
PDS_HOSTNAME=localhost:3000
|
|
# =============================================================================
|
|
# Database
|
|
# =============================================================================
|
|
DATABASE_URL=postgres://postgres:postgres@localhost:5432/pds
|
|
# Connection pool settings (defaults are good for most deployments)
|
|
# DATABASE_MAX_CONNECTIONS=100
|
|
# DATABASE_MIN_CONNECTIONS=10
|
|
# DATABASE_ACQUIRE_TIMEOUT_SECS=30
|
|
# =============================================================================
|
|
# Blob Storage (S3-compatible)
|
|
# =============================================================================
|
|
S3_ENDPOINT=http://localhost:9000
|
|
AWS_REGION=us-east-1
|
|
S3_BUCKET=pds-blobs
|
|
AWS_ACCESS_KEY_ID=minioadmin
|
|
AWS_SECRET_ACCESS_KEY=minioadmin
|
|
# =============================================================================
|
|
# Valkey (for caching and distributed rate limiting)
|
|
# =============================================================================
|
|
# If not set, falls back to in-memory caching (single-node only)
|
|
# VALKEY_URL=redis://localhost:6379
|
|
# =============================================================================
|
|
# Security Secrets
|
|
# =============================================================================
|
|
# These MUST be set in production (minimum 32 characters each)
|
|
# In development, set TRANQUIL_PDS_ALLOW_INSECURE_SECRETS=1 to use defaults
|
|
# Server-wide secret for OAuth token signing (HS256)
|
|
# JWT_SECRET=your-secure-random-string-at-least-32-chars
|
|
# Secret for DPoP proof validation
|
|
# DPOP_SECRET=your-secure-random-string-at-least-32-chars
|
|
# Key for encrypting user signing keys at rest (AES-256-GCM)
|
|
# MASTER_KEY=your-secure-random-string-at-least-32-chars
|
|
# Set this ONLY in development to allow default/weak secrets
|
|
# TRANQUIL_PDS_ALLOW_INSECURE_SECRETS=1
|
|
# =============================================================================
|
|
# PLC Directory
|
|
# =============================================================================
|
|
# PLC_DIRECTORY_URL=https://plc.directory
|
|
# PLC_TIMEOUT_SECS=10
|
|
# PLC_CONNECT_TIMEOUT_SECS=5
|
|
# Optional: rotation key for PLC operations (defaults to user's key)
|
|
# PLC_ROTATION_KEY=did:key:...
|
|
# =============================================================================
|
|
# DID Resolution
|
|
# =============================================================================
|
|
# Cache TTL for resolved DID documents (default: 300 seconds)
|
|
# DID_CACHE_TTL_SECS=300
|
|
# =============================================================================
|
|
# Relays
|
|
# =============================================================================
|
|
# Comma-separated list of relay URLs to notify via requestCrawl
|
|
# CRAWLERS=https://bsky.network,https://relay.upcloud.world
|
|
# =============================================================================
|
|
# Firehose (subscribeRepos WebSocket)
|
|
# =============================================================================
|
|
# Buffer size for firehose broadcast channel
|
|
# FIREHOSE_BUFFER_SIZE=10000
|
|
# Disconnect slow consumers after this many events of lag
|
|
# FIREHOSE_MAX_LAG=5000
|
|
# =============================================================================
|
|
# Notification Service
|
|
# =============================================================================
|
|
# Queue processing settings
|
|
# NOTIFICATION_BATCH_SIZE=100
|
|
# NOTIFICATION_POLL_INTERVAL_MS=1000
|
|
# Email notifications (via sendmail/msmtp)
|
|
# MAIL_FROM_ADDRESS=noreply@example.com
|
|
# MAIL_FROM_NAME=My PDS
|
|
# SENDMAIL_PATH=/usr/sbin/sendmail
|
|
# Discord notifications (via webhook)
|
|
# DISCORD_WEBHOOK_URL=https://discord.com/api/webhooks/...
|
|
# Telegram notifications (via bot)
|
|
# TELEGRAM_BOT_TOKEN=your-bot-token
|
|
# Signal notifications (via signal-cli)
|
|
# SIGNAL_CLI_PATH=/usr/local/bin/signal-cli
|
|
# SIGNAL_SENDER_NUMBER=+1234567890
|
|
# =============================================================================
|
|
# Repository Import
|
|
# =============================================================================
|
|
# Set to "true" to accept repository imports
|
|
# ACCEPTING_REPO_IMPORTS=false
|
|
# Maximum import size in bytes (default: 50MB)
|
|
# MAX_IMPORT_SIZE=52428800
|
|
# Maximum blocks per import (default: 100000)
|
|
# MAX_IMPORT_BLOCKS=100000
|
|
# Skip verification during import (testing only)
|
|
# SKIP_IMPORT_VERIFICATION=false
|
|
# =============================================================================
|
|
# Account Registration
|
|
# =============================================================================
|
|
# Require invite codes for registration
|
|
# INVITE_CODE_REQUIRED=false
|
|
# Comma-separated list of available user domains
|
|
# AVAILABLE_USER_DOMAINS=example.com
|
|
# =============================================================================
|
|
# Rate Limiting
|
|
# =============================================================================
|
|
# Disable all rate limiting (testing only, NEVER in production)
|
|
# DISABLE_RATE_LIMITING=1
|
|
# =============================================================================
|
|
# Miscellaneous
|
|
# =============================================================================
|
|
# Allow HTTP for proxy requests (development only)
|
|
# ALLOW_HTTP_PROXY=1
|
|
# Custom frontend directory (defaults to ./frontend/dist)
|
|
# FRONTEND_DIR=/path/to/frontend/dist
|
|
CARGO_MOMMYS_LITTLE=mister
|
|
CARGO_MOMMYS_PRONOUNS=his
|
|
CARGO_MOMMYS_ROLES=daddy
|
|
CARGO_MOMMYS_EMOTES="🚛/🧱/🚜/🔩/🦺"
|
|
CARGO_MOMMYS_MOODS=ominous
|