dtoro
9bba097d91
Delete the old Python+React mule-image stack (backend/, frontend/,
docker-compose.yml, mulita.yml, .env*) plus the one-shot migration and
sample dirs (migrate/, photos-sample/, photovault-app-prompt.md). Only
the PhotoPrism + Go sidecar + SvelteKit web stack remains, so drop the
".photoprism." qualifier from the compose+env filenames.
Bind PhotoPrism's port to 127.0.0.1 so the user-facing surface is just
the SvelteKit web/ app; admin reaches PP's UI via SSH tunnel. Flatten
PHOTOPRISM_INDEX_WORKERS' nested default (podman-compose's interpolator
doesn't expand ${A:-${B:-…}}). Rewrite README for the current stack.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
71 lines
3.1 KiB
Plaintext
71 lines
3.1 KiB
Plaintext
# Example environment file. Copy to `.env` and adjust.
|
|
#
|
|
# podman-compose --env-file .env \
|
|
# -f docker-compose.yml -f docker-compose.podman.yml up -d
|
|
|
|
|
|
# ── REQUIRED ─────────────────────────────────────────────────────────────────
|
|
|
|
# Host path to your photo library. PhotoPrism reads this in place and
|
|
# writes EXIF backwrites next to originals (when PP_ORIGINALS_MODE=rw).
|
|
PHOTO_DIRS=/mnt/library/homecloud/admin/files/
|
|
|
|
# Bootstrap admin password. The first PhotoPrism boot creates an `admin`
|
|
# account with this password. Rotate after first login from the UI.
|
|
PP_ADMIN_PASSWORD=please-change-me
|
|
|
|
# MariaDB passwords. Generate with `openssl rand -hex 24`.
|
|
PP_DB_PASSWORD=please-change-me
|
|
PP_DB_ROOT_PASSWORD=please-change-me
|
|
|
|
|
|
# ── OPTIONAL ─────────────────────────────────────────────────────────────────
|
|
|
|
# Loopback host port for PhotoPrism's API (and UI, if you tunnel to it).
|
|
# Vite proxies /api/v1/* here and the host-mode sidecar reaches it on
|
|
# localhost. Not published on the public interface.
|
|
PP_PORT=2342
|
|
|
|
# Site URL — used for share links, OIDC redirect URI, and reverse-proxy aware
|
|
# URL generation. Set to the public hostname once the proxy is in front.
|
|
PP_SITE_URL=http://localhost:2342/
|
|
|
|
# Auth mode — "password" for username/password (default), "public" for an
|
|
# unauthenticated kiosk mode (don't use this on a multi-user library).
|
|
PP_AUTH_MODE=password
|
|
|
|
# Library mount mode. "rw" allows rename / folder mutations / EXIF backwrite;
|
|
# "ro" is safe-for-archives but disables those sidecar endpoints. Set in
|
|
# lockstep with PP_READONLY below.
|
|
PP_ORIGINALS_MODE=rw
|
|
PP_READONLY=false
|
|
|
|
# UID/GID inside the PhotoPrism container. Set these to the host UID/GID that
|
|
# owns ${PHOTO_DIRS}. `id -u` and `id -g`.
|
|
PP_UID=1000
|
|
PP_GID=1000
|
|
|
|
|
|
# ── OIDC SSO (Authentik or equivalent) ───────────────────────────────────────
|
|
# Leave blank to keep OIDC dormant. Fill in to enable the "Sign in with OIDC"
|
|
# button on the login page; OIDC_REGISTER=true auto-creates accounts at role
|
|
# `user` (override to `admin` to grant full access on first SSO login).
|
|
#
|
|
# The compose file reads these and maps them to PhotoPrism's actual env-var
|
|
# names (PHOTOPRISM_OIDC_URI / _CLIENT / _SECRET / _PROVIDER) — see the
|
|
# comment in docker-compose.yml. The PhotoPrism callback URI is auto-derived
|
|
# from PP_SITE_URL; do not set it manually.
|
|
|
|
# OIDC_PROVIDER_NAME=Authentik
|
|
# OIDC_ISSUER_URL=https://auth.example.com/application/o/photoprism/
|
|
# OIDC_CLIENT_ID=...
|
|
# OIDC_CLIENT_SECRET=...
|
|
# OIDC_SCOPES=openid profile email
|
|
# OIDC_REGISTER=true
|
|
# OIDC_ROLE=user
|
|
|
|
|
|
# ── LOGGING ──────────────────────────────────────────────────────────────────
|
|
|
|
PP_LOG_LEVEL=info
|