Sam Rolfe
3c0030c9a3
- Session login for the single user Sam: server-side session store with an HMAC-signed session cookie, POST /login, POST /logout, and double-submit CSRF on every form post. Unauthenticated requests to / and /partials/* redirect to /login?next=... - Empty dashboard shell in the Family Home Lab design system: left nav (category and folder placeholders), centre list, right detail pane. - Copy tokens.css and the self-hosted Inter fonts from the family-home-lab design system into web/static; vendor htmx 2.0.4. No cross-project imports at runtime. - Dark mode via prefers-color-scheme plus a persisted toggle; phone-first layout with 44px touch targets, hairline borders, 8px grid, pill CTAs. - Config: EMAIL_AGENT_PASSWORD for the login password, falling back to EMAIL_AGENT_SESSION_SECRET so one configured secret is enough. Co-Authored-By: Paperclip <noreply@paperclip.ing>
54 lines
1.8 KiB
YAML
54 lines
1.8 KiB
YAML
name: email-agent
|
|
|
|
# Own container and image for this project (AGENTS.md §9). Not shared with any
|
|
# other project.
|
|
|
|
services:
|
|
email-agent:
|
|
build:
|
|
context: .
|
|
args:
|
|
VERSION: ${EMAIL_AGENT_VERSION:-dev}
|
|
COMMIT: ${EMAIL_AGENT_COMMIT:-unknown}
|
|
BUILD_TIME: ${EMAIL_AGENT_BUILD_TIME:-}
|
|
image: email-agent:${EMAIL_AGENT_TAG:-latest}
|
|
container_name: email-agent
|
|
restart: unless-stopped
|
|
|
|
# Posture: keep the service on the internal network only. Caddy on .35
|
|
# proxies to this port. Publishing is required for that hop.
|
|
ports:
|
|
- "${EMAIL_AGENT_PORT:-8790}:8790"
|
|
|
|
environment:
|
|
EMAIL_AGENT_ENV: ${EMAIL_AGENT_ENV:-production}
|
|
EMAIL_AGENT_ADDR: ":8790"
|
|
EMAIL_AGENT_DB_PATH: /data/email_agent.db
|
|
EMAIL_AGENT_LOG_LEVEL: ${EMAIL_AGENT_LOG_LEVEL:-info}
|
|
EMAIL_AGENT_PUBLIC_BASE_URL: ${EMAIL_AGENT_PUBLIC_BASE_URL:-https://mail.lab.audasmedia.com.au}
|
|
# Secrets: names only here. Values are supplied by the host environment
|
|
# (see ~/.config/environment.d/10-secrets.conf) or a gitignored .env file,
|
|
# and are never committed.
|
|
EMAIL_AGENT_SESSION_SECRET: ${EMAIL_AGENT_SESSION_SECRET:-}
|
|
EMAIL_AGENT_PASSWORD: ${EMAIL_AGENT_PASSWORD:-}
|
|
JEV_BASE_URL: ${JEV_BASE_URL:-}
|
|
JEV_API_KEY: ${JEV_API_KEY:-}
|
|
OMNIROUTE_BASE_URL: ${OMNIROUTE_BASE_URL:-}
|
|
OMNIROUTE_API_KEY: ${OMNIROUTE_API_KEY:-}
|
|
EMAIL_AGENT_GMAIL_CREDENTIALS_FILE: ${EMAIL_AGENT_GMAIL_CREDENTIALS_FILE:-}
|
|
EMAIL_AGENT_GMAIL_TOKEN_FILE: ${EMAIL_AGENT_GMAIL_TOKEN_FILE:-}
|
|
HUB_TOKEN: ${HUB_TOKEN:-}
|
|
|
|
volumes:
|
|
- email_agent_data:/data
|
|
|
|
healthcheck:
|
|
test: ["CMD", "/usr/local/bin/email-agent", "-healthcheck"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 5s
|
|
|
|
volumes:
|
|
email_agent_data:
|