- Update nginx config for HTTPS with Let's Encrypt certificates - Add HTTP to HTTPS redirect - Configure SSL security headers and HSTS - Add Django HTTPS security settings for production - Fix proxy_pass to use correct port 8081 - Enhance Content Security Policy for HTTPS
46 lines
1.4 KiB
Plaintext
46 lines
1.4 KiB
Plaintext
# Database Configuration
|
|
POSTGRES_DB=stiftung
|
|
POSTGRES_USER=stiftung
|
|
POSTGRES_PASSWORD=stiftungpass
|
|
DB_HOST=db
|
|
DB_PORT=5432
|
|
|
|
# Django Configuration
|
|
DJANGO_SECRET_KEY=your-secret-key-here-change-in-production
|
|
DJANGO_DEBUG=1
|
|
DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1
|
|
|
|
# Production environment variables (alternative names for Docker Compose)
|
|
# SECRET_KEY=your-production-secret-key-here
|
|
# ALLOWED_HOSTS=your-domain.com,www.your-domain.com,localhost,127.0.0.1
|
|
|
|
# HTTPS Security Settings (enable after SSL certificate is installed)
|
|
# SECURE_SSL_REDIRECT=True
|
|
# SESSION_COOKIE_SECURE=True
|
|
# CSRF_COOKIE_SECURE=True
|
|
# SECURE_HSTS_SECONDS=31536000
|
|
# SECURE_HSTS_INCLUDE_SUBDOMAINS=True
|
|
# SECURE_HSTS_PRELOAD=True
|
|
|
|
LANGUAGE_CODE=de
|
|
TIME_ZONE=Europe/Berlin
|
|
|
|
# Redis Configuration
|
|
REDIS_URL=redis://redis:6379/0
|
|
|
|
# Paperless-ngx Integration
|
|
PAPERLESS_API_URL=http://192.168.178.167:30070
|
|
PAPERLESS_API_TOKEN=e7107a43b6bef6707f11d7f7462708b87be3123c
|
|
# Tag-Namen (mit Unterstrichen, wie in Paperless NGX umbenannt)
|
|
PAPERLESS_REQUIRED_TAG=Stiftung_Destinatäre
|
|
PAPERLESS_LAND_TAG=Stiftung_Land_und_Pächter
|
|
PAPERLESS_ADMIN_TAG=Stiftung_Administration
|
|
PAPERLESS_DESTINATAERE_TAG_ID=210
|
|
PAPERLESS_LAND_TAG_ID=204
|
|
PAPERLESS_ADMIN_TAG_ID=216
|
|
# Integration von Grampsweb zur Ahnenforschung und Prüfung
|
|
GRAMPS_URL=http://192.168.178.167:30179
|
|
GRAMPS_USERNAME=Stiftung
|
|
GRAMPS_PASSWORD=home4Gty94rj*de
|
|
|
|
|