Nexus Agent
b62f1039db
SSH origin checks cover auth contracts and once-schedule create/delete when external HTTPS is blocked; includes install script for probe credentials. Co-authored-by: Cursor <cursoragent@cursor.com>
40 lines
1.6 KiB
Bash
40 lines
1.6 KiB
Bash
# Production Compose env — copy to docker/.env.prod (never commit)
|
||
# Fresh install: bash deploy/install-nexus-fresh.sh (auto-generates NEXUS keys per host)
|
||
# MySQL / Redis 不在 Docker 栈 — 请在宿主机或 1Panel 自建，安装向导步骤 3 填写
|
||
|
||
# Auto-generated on fresh install (unique per server). Do NOT copy between hosts.
|
||
NEXUS_SECRET_KEY=
|
||
NEXUS_API_KEY=
|
||
NEXUS_ENCRYPTION_KEY=
|
||
|
||
# 1 = entrypoint must not write /app/.env until install wizard step 3
|
||
NEXUS_INSTALL_WIZARD_PENDING=0
|
||
|
||
# Public URL
|
||
NEXUS_CORS_ORIGINS=https://api.synaglobal.vip
|
||
NEXUS_API_BASE_URL=https://api.synaglobal.vip
|
||
|
||
# Nexus container resource profile (docker/profiles/*.env)
|
||
NEXUS_DB_POOL_SIZE=30
|
||
NEXUS_DB_MAX_OVERFLOW=20
|
||
|
||
# 1Panel：nx update 自动探测并写入（安装向导步骤 3 预填）
|
||
# NEXUS_1PANEL_DB_HOST=1Panel-mysql-xxxx
|
||
# NEXUS_1PANEL_REDIS_HOST=1Panel-redis-xxxx
|
||
|
||
# 宿主机 Compose 插值/ nx update 同步用；安装向导完成后以卷内 /app/.env 为准（不经 Compose 注入）
|
||
# 1Panel 有密码时: redis://:你的密码@1Panel-redis-xxxx:6379/0
|
||
NEXUS_REDIS_URL=redis://host.docker.internal:6379/0
|
||
|
||
# 宿主机 git 仓库路径（容器内安装向导用于提示 nx cron / nx update）
|
||
NEXUS_HOST_ROOT=/opt/nexus
|
||
|
||
# Optional — production probe / E2E only (host .env.prod; NOT for API runtime; never commit values)
|
||
# NEXUS_TEST_ADMIN_PASSWORD — must match admin login password
|
||
# NEXUS_PROBE_CLIENT_IP — optional; IP in login allowlist for origin probe (auto-read from DB if unset)
|
||
# NEXUS_TEST_ADMIN_PASSWORD=
|
||
# NEXUS_PROBE_CLIENT_IP=
|
||
|
||
# Optional
|
||
# NEXUS_PUBLISH_PORT=8600
|