tajniak81andClaude Opus 5
ee4ac441be
The project has no public installs, so there is nothing to migrate from. MigrateLegacyFile, the file-backed Store it read through, PLUGINS_FILE and the legacy path threaded through the Server all go. What is left is one store, PocketBase, and a plugins package that touches no filesystem at all. That was the last thing keeping api_data alive, so the volume goes too. All four compose files now declare exactly one volume, pb_data, and the standalone API Server compose declares none - it talks to an external PocketBase and has nothing of its own to keep. Backing up the stack is backing up one path again. Both images get simpler for it. The API Server image loses VOLUME /data and the su-exec entrypoint that existed only to fix a mounted volume's ownership, so it goes back to a plain USER app; its working directory is now /app and holds nothing. The AIO image loses its second volume and chowns only /pb/pb_data. One consequence worth stating plainly, because it is a small regression rather than a no-op. The panel's Settings -> PocketBase and Settings -> Web App screens write .env in the working directory, which is now ephemeral. In the multi-container stack that changes nothing: compose sets all five of those keys as container environment, and loadDotEnv only applies a key that is not already set, so the file could never win a restart there anyway. In the AIO image it did win for POCKETBASE_ADMIN_EMAIL/_PASSWORD, which are not in that container's environment - so a service account fixed from the panel now lasts only until the container is recreated. Both READMEs say so. Moving those two screens into the app_settings singleton would close it properly; the PocketBase URL and credentials cannot follow, since they are how the database is reached in the first place. go build, go vet and go test ./... pass; the compose files parse and each resolves to a single pb_data volume. Not verified: no Docker CLI here, so neither image was built. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
50 lines
2.4 KiB
Bash
50 lines
2.4 KiB
Bash
# API Server configuration
|
|
# Copy to .env and adjust. The server also reads plain environment variables.
|
|
# Never commit the real .env file.
|
|
|
|
# Address the API Server listens on. A bare port (8080) is accepted too.
|
|
API_ADDR=:8080
|
|
|
|
# PocketBase base URL (no trailing slash). The API Server is the only thing that
|
|
# talks to PocketBase; it proxies /api/auth/* to this address, which is never
|
|
# exposed to clients. Editable at runtime from the panel (PocketBase section),
|
|
# which writes the change back into this file.
|
|
POCKETBASE_URL=http://10.2.1.10:8027
|
|
|
|
# PocketBase superuser service account. Every privileged flow runs through it:
|
|
# user/organization management and all car-domain database access. Leave unset
|
|
# and the server still starts — a superadmin can log in to the panel and
|
|
# configure it there; management endpoints return 503 until then.
|
|
POCKETBASE_ADMIN_EMAIL=
|
|
POCKETBASE_ADMIN_PASSWORD=
|
|
|
|
# CORS allowed origins for browser clients (comma separated, or * for any).
|
|
# Native mobile apps are not subject to CORS. Editable at runtime from the panel
|
|
# (Web App section), which writes the change back into this file.
|
|
CORS_ALLOW_ORIGINS=http://localhost:8090
|
|
|
|
# Web App address, probed by GET /api/status and shown on the panel. Editable at
|
|
# runtime from the panel (Web App section).
|
|
WEBAPP_URL=http://localhost:8090
|
|
|
|
# PocketBase auth collection holding app users (default: users).
|
|
AUTH_USERS_COLLECTION=users
|
|
|
|
# --- EV charging control (Anker Solix, OCPP) ---------------------------------
|
|
# Only relevant when a charger is set to own/proxy control mode. The charger
|
|
# dials in to /ocpp/{serial} on this server, authenticating with OCPP Basic auth
|
|
# (serial + per-charger control token). A plaintext ws:// would carry that token
|
|
# in the clear, so connections that did not arrive over TLS are rejected —
|
|
# disable only for local dev on a trusted network.
|
|
OCPP_REQUIRE_TLS=true
|
|
|
|
# The canonical ws(s):// base an operator points the charger at. Set this when
|
|
# the server sits behind a reverse proxy, where deriving the URL from request
|
|
# headers is unreliable. Empty = derive it.
|
|
OCPP_PUBLIC_URL=
|
|
|
|
# --- Legacy names -----------------------------------------------------------
|
|
# PB_URL, PB_ADMIN_EMAIL, PB_ADMIN_PASSWORD, PORT and CORS_ORIGINS are still
|
|
# honoured for older deployments; the POCKETBASE_*/API_ADDR names above win when
|
|
# both are set. AUTH_SECRET is gone — the server no longer mints its own JWTs.
|