2dc9be4678
Two-app pnpm workspace for the gashboard (mining dashboard) project: @gashboard/api (Express 5 + TS) and @gashboard/web (Vue 3 + Vite + TS). Shared tsconfig.base.json. Multi-stage Dockerfile (node:22.12-alpine, non-root, healthchecked) and docker-compose.yml ready to deploy as a Portainer Stack on Umbrel — joins umbrel_main_network so it can reach the Datum container directly. .env.example documents every var; README covers the Portainer deploy flow and the security posture. Note: Dockerfile has a TODO marker to SHA256-pin the base image before shipping to production. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
35 lines
1.4 KiB
Plaintext
35 lines
1.4 KiB
Plaintext
# gashboard configuration
|
|
# Copy to .env (or set in Portainer stack env) and fill in values.
|
|
|
|
# ---- Server ----
|
|
PORT=8080
|
|
NODE_ENV=production
|
|
LOG_LEVEL=info
|
|
# Origin allowed by CORS. Leave unset to disable CORS entirely (single-origin
|
|
# deploy where the API serves the SPA from the same host).
|
|
# CORS_ORIGIN=https://gashboard.example.com
|
|
# Override the static dir the API serves the built SPA from. Default resolves
|
|
# to ../web/dist relative to the running api bundle.
|
|
# STATIC_DIR=
|
|
|
|
# ---- Datum gateway (the Umbrel app we're polling) ----
|
|
# Reachable internally inside Umbrel's docker network. From your LAN it's also
|
|
# at http://192.168.1.191:21000 but that path goes through umbrelOS auth.
|
|
# Inside the Umbrel docker network, use the Datum service hostname directly.
|
|
DATUM_URL=http://datum_datum_1:21000
|
|
DATUM_ADMIN_USER=admin
|
|
DATUM_ADMIN_PASSWORD=
|
|
# How often to scrape /clients (ms). Datum updates per-worker hashrate every
|
|
# few seconds; 5s is a sane default.
|
|
DATUM_POLL_INTERVAL_MS=5000
|
|
|
|
# ---- Nostr auth ----
|
|
# Comma-separated bech32 npubs allowed to log in. Anything else is rejected
|
|
# at NIP-98 verification, before any session is issued.
|
|
NOSTR_ALLOWED_NPUBS=npub19tfnjfvxzt45jrz78mr3cldrtlg8pj5kp6gshp37582xcj7a0ctq7c8d7j,npub10wzfa7jkqj6c65xyr93hhxrns37ml9tss82jvymv8fymwdtu6cts3h6pvr
|
|
|
|
# ---- Sessions ----
|
|
# 32+ random bytes, hex. Generate with: openssl rand -hex 32
|
|
JWT_SECRET=
|
|
JWT_TTL_SECONDS=86400
|