platform/platform-infra/stacks/mariadb/.env.example at cf8c26b19849a9489b663e8bfb78d1fb73a9f89c - bart/platform - Forgejo: Beyond coding. We Forge.

bart/platform

Bart Van Geyt 41a01c60ef Phase 2: platform service stacks + CLAUDE.md

Add base Docker Compose projects under platform-infra/stacks, using the
Phase 1 ZFS platform datasets and shared networks:

- bootstrap-networks.sh: idempotent creation of shared `proxy` (edge) and
  `platform` (internal) Docker networks.
- traefik: edge router with TLS/ACME (HTTP-01), global HTTP->HTTPS redirect,
  file-based security-headers/TLS middlewares, and a basic-auth dashboard.
  Docker access via a least-privilege tecnativa/docker-socket-proxy instead
  of mounting docker.sock directly.
- mariadb: shared instance on tank/platform/mariadb, utf8mb4, tuned; not
  published to the host (internal `platform` network only).
- forgejo: Git + container registry over HTTPS (SSH disabled to avoid extra
  inbound ports), SQLite backend, data on tank/platform/forgejo.

Each stack ships a committed .env.example (real .env is git-ignored) and the
stacks README documents bring-up order, secrets, and verification.

Also add root CLAUDE.md so fresh sessions orient from files cheaply:
philosophy, doc pointers, naming quick-ref, repo map, commands, agreements.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-07 16:58:18 +02:00

5 lines

198 B

Text

Raw Blame History

 # Copy to .env (git-ignored) and fill in.
 # Root password for the shared MariaDB instance. Generate a strong value:
 #   openssl rand -base64 24
 MARIADB_ROOT_PASSWORD=replace_with_a_strong_password