- Update remaining Docker Compose templates with centralized variables
- Fix service tag isolation to deploy individual services only
- Update all README files with variable management architecture
- Document variable hierarchy in DEPLOYMENT_LEARNINGS.md
- Add comprehensive variable usage patterns to CLAUDE.md
- Standardize domain references using {{ subdomains.* }} pattern
- Replace hardcoded network names with {{ docker.network_name }}
- Update hairpinning configuration to use variables
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
		
	
		
			
				
	
	
		
			46 lines
		
	
	
		
			2.4 KiB
		
	
	
	
		
			Django/Jinja
		
	
	
	
	
	
			
		
		
	
	
			46 lines
		
	
	
		
			2.4 KiB
		
	
	
	
		
			Django/Jinja
		
	
	
	
	
	
| # The UID and GID of the user used to run paperless in the container. Set this
 | |
| # to your UID and GID on the host so that you have write access to the
 | |
| # consumption directory.
 | |
| #USERMAP_UID=1000
 | |
| #USERMAP_GID=1000
 | |
| 
 | |
| # Additional languages to install for text recognition, separated by a
 | |
| # whitespace. Note that this is
 | |
| # different from PAPERLESS_OCR_LANGUAGE (default=eng), which defines the
 | |
| # language used for OCR.
 | |
| # The container installs English, German, Italian, Spanish and French by
 | |
| # default.
 | |
| # See https://packages.debian.org/search?keywords=tesseract-ocr-&searchon=names&suite=buster
 | |
| # for available languages.
 | |
| #PAPERLESS_OCR_LANGUAGES=tur ces
 | |
| 
 | |
| ###############################################################################
 | |
| # Paperless-specific settings                                                 #
 | |
| ###############################################################################
 | |
| 
 | |
| # All settings defined in the paperless.conf.example can be used here. The
 | |
| # Docker setup does not use the configuration file.
 | |
| # A few commonly adjusted settings are provided below.
 | |
| 
 | |
| # This is required if you will be exposing Paperless-ngx on a public domain
 | |
| # (if doing so please consider security measures such as reverse proxy)
 | |
| PAPERLESS_URL=https://{{ subdomains.paper }}
 | |
| 
 | |
| # Adjust this key if you plan to make paperless available publicly. It should
 | |
| # be a very long sequence of random characters. You don't need to remember it.
 | |
| PAPERLESS_SECRET_KEY={{ vault_paperlessngx.secret_key }}
 | |
| 
 | |
| # Use this variable to set a timezone for the Paperless Docker containers. If not specified, defaults to UTC.
 | |
| PAPERLESS_TIME_ZONE=America/Denver
 | |
| 
 | |
| # The default language to use for OCR. Set this to the language most of your
 | |
| # documents are written in.
 | |
| #PAPERLESS_OCR_LANGUAGE=eng
 | |
| 
 | |
| # Set if accessing paperless via a domain subpath e.g. https://domain.com/PATHPREFIX and using a reverse-proxy like traefik or nginx
 | |
| #PAPERLESS_FORCE_SCRIPT_NAME=/PATHPREFIX
 | |
| #PAPERLESS_STATIC_URL=/PATHPREFIX/static/ # trailing slash required
 | |
| 
 | |
| # authentik
 | |
| PAPERLESS_APPS: "allauth.socialaccount.providers.openid_connect"
 | |
| PAPERLESS_SOCIALACCOUNT_PROVIDERS: '{"openid_connect": {"APPS": [{"provider_id": "authentik","name": "Authentik SSO","client_id": "{{ vault_paperlessngx.oidc.client_id }}","secret": "{{ vault_paperlessngx.oidc.client_secret }}","settings": { "server_url": "https://{{ subdomains.auth }}/application/o/paperlessngx/.well-known/openid-configuration"}}]}}' |