Harden pre-production deployment with external environment and preflights

2026-09-16 00:22:19 +02:00
parent 5d3ae10036
commit 2813795c9d
17 changed files with 1002 additions and 76 deletions
@@ -0,0 +1,29 @@
+# Template only. Copy outside the checkout to:
+# /home/kai/.config/metalcircle/preprod.env (owner kai, mode 600).
+# Keep existing database/admin values when migrating. Never source this file.
+# Compose dotenv syntax applies; single-quote passwords/tokens containing $ or #.
+# Empty required values deliberately block deployment. No COMPOSE_* / DOCKER_* overrides.
+POSTGRES_DB=concerts
+POSTGRES_USER=concerts
+POSTGRES_PASSWORD=
+
+INITIAL_ADMIN_USERNAME=
+INITIAL_ADMIN_PASSWORD=
+INITIAL_ADMIN_EMAIL=
+
+COOKIE_SECURE=true
+
+# Dedicated metalcircle-bot token: read:user + write:issue, restricted to this repo.
+GITEA_URL=http://192.168.178.5:3000
+GITEA_TOKEN=
+GITEA_OWNER=kai
+GITEA_REPO=pingu-concerts
+
+PUSH_ENABLED=true
+FIREBASE_PROJECT_ID=metalcircle-30d9b
+FIREBASE_SERVICE_ACCOUNT_FILE=/home/kai/.secrets/metalcircle/firebase-push-preprod.json
+# GOOGLE_APPLICATION_CREDENTIALS is set by Compose inside the container.
+
+# Optional, inclusive Europe/Berlin registration dates.
+ALPHA_TESTER_UNTIL=2026-10-31
+BETA_TESTER_UNTIL=2026-12-31