Skip to content
Merged

060 #17

Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
43 changes: 43 additions & 0 deletions .env.docker
Original file line number Diff line number Diff line change
@@ -0,0 +1,43 @@
# Sample .env file for a docker setup where all the needed
# files are in your $(cwd)/pabawi dir which is mounted to /pabawi in the container

PORT=3000
HOST=localhost
Copy link

Copilot AI Jan 30, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For Docker deployments, binding to HOST=localhost inside the container will typically make the service unreachable via published ports (the process listens only on the container loopback). Use HOST=0.0.0.0 (or omit HOST if the app defaults appropriately) so port mapping works.

Suggested change
HOST=localhost
HOST=0.0.0.0

Copilot uses AI. Check for mistakes.
LOG_LEVEL=info
DATABASE_PATH=/pabawi/data/pabawi.db

# PuppetDB integration
PUPPETDB_ENABLED=true
PUPPETDB_SERVER_URL=https://puppet.example.com
PUPPETDB_PORT=8081
PUPPETDB_TOKEN=
PUPPETDB_SSL_ENABLED=true
# You can generate certs for pabawi using scripts/generate-pabawi-cert.sh
PUPPETDB_SSL_CA=/pabawi/certs/ca.pem
PUPPETDB_SSL_CERT=/pabawi/certs/pabawi.pem
PUPPETDB_SSL_KEY=/pabawi/certs/pabawi-key.pem
PUPPETDB_SSL_REJECT_UNAUTHORIZED=true

# Puppetserver integration
PUPPETSERVER_ENABLED=true
PUPPETSERVER_SERVER_URL=https://puppet.example.com
PUPPETSERVER_PORT=8140
PUPPETSERVER_TOKEN=
PUPPETSERVER_SSL_ENABLED=true
# You can use the same cert used for PuppetBD or a different one
PUPPETSERVER_SSL_CA=/pabawi/certs/ca.pem
PUPPETSERVER_SSL_CERT=/pabawi/certs/pabawi.pem
PUPPETSERVER_SSL_KEY=/pabawi/certs/pabawi-key.pem
PUPPETSERVER_SSL_REJECT_UNAUTHORIZED=true

# Hiera integration
HIERA_ENABLED=true
HIERA_CONTROL_REPO_PATH=/pabawi/control-repo
HIERA_CONFIG_PATH=hiera.yaml

# Bolt integration
BOLT_COMMAND_WHITELIST_ALLOW_ALL=false
BOLT_COMMAND_WHITELIST=["ls","pwd","whoami","uptime"]
BOLT_EXECUTION_TIMEOUT=300000
# Bolt project files can stay in the control repo or in a separate dir
BOLT_PROJECT_PATH=/pabawi/control-repo
File renamed without changes.
File renamed without changes.
Loading