BetterFrame/deploy/docker/sec-config.yaml
Mitchell R 96d7cc45ba
fix(deploy): require proxied local services
Bind native backend services and Node-RED to loopback so Angie remains the public auth boundary. Keep Docker on an internal compose network and stop kiosk fallback to a layout when display default is none.
2026-05-11 09:51:00 +02:00

62 lines
1.6 KiB
YAML

# BSB runtime configuration for the Docker compose stack.
# Backend services bind all interfaces inside the private compose network;
# Angie/nginx is the only published host port.
default:
observable:
observable-default:
plugin: observable-default
enabled: true
config: {}
events:
events-default:
plugin: events-default
enabled: true
services:
service-store:
plugin: service-store
enabled: true
config:
sqlitePath: /var/lib/betterframe/betterframe.db
service-admin-http:
plugin: service-admin-http
enabled: true
config:
host: 0.0.0.0
port: 18080
dataDir: /var/lib/betterframe
sessionIdleSeconds: 43200
sessionMaxSeconds: 2592000
loginLockoutThreshold: 8
loginLockoutSeconds: 900
argon2Memory: 65536
argon2TimeCost: 3
argon2Parallelism: 2
cookieName: betterframe_session
totpIssuer: BetterFrame
service-api-http:
plugin: service-api-http
enabled: true
config:
host: 0.0.0.0
port: 18081
codeTtlSeconds: 600
dataDir: /var/lib/betterframe
argon2Memory: 65536
argon2TimeCost: 3
argon2Parallelism: 2
noderedUrl: http://nodered:1880
service-coordinator-ws:
plugin: service-coordinator-ws
enabled: true
config:
host: 0.0.0.0
port: 18082
noderedUrl: http://nodered:1880
dataDir: /var/lib/betterframe
argon2Memory: 65536
argon2TimeCost: 3
argon2Parallelism: 2