- Update remaining Docker Compose templates with centralized variables
- Fix service tag isolation to deploy individual services only
- Update all README files with variable management architecture
- Document variable hierarchy in DEPLOYMENT_LEARNINGS.md
- Add comprehensive variable usage patterns to CLAUDE.md
- Standardize domain references using {{ subdomains.* }} pattern
- Replace hardcoded network names with {{ docker.network_name }}
- Update hairpinning configuration to use variables
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
		
	
		
			
				
	
	
		
			46 lines
		
	
	
		
			2.4 KiB
		
	
	
	
		
			Django/Jinja
		
	
	
	
	
	
			
		
		
	
	
			46 lines
		
	
	
		
			2.4 KiB
		
	
	
	
		
			Django/Jinja
		
	
	
	
	
	
# The UID and GID of the user used to run paperless in the container. Set this
 | 
						|
# to your UID and GID on the host so that you have write access to the
 | 
						|
# consumption directory.
 | 
						|
#USERMAP_UID=1000
 | 
						|
#USERMAP_GID=1000
 | 
						|
 | 
						|
# Additional languages to install for text recognition, separated by a
 | 
						|
# whitespace. Note that this is
 | 
						|
# different from PAPERLESS_OCR_LANGUAGE (default=eng), which defines the
 | 
						|
# language used for OCR.
 | 
						|
# The container installs English, German, Italian, Spanish and French by
 | 
						|
# default.
 | 
						|
# See https://packages.debian.org/search?keywords=tesseract-ocr-&searchon=names&suite=buster
 | 
						|
# for available languages.
 | 
						|
#PAPERLESS_OCR_LANGUAGES=tur ces
 | 
						|
 | 
						|
###############################################################################
 | 
						|
# Paperless-specific settings                                                 #
 | 
						|
###############################################################################
 | 
						|
 | 
						|
# All settings defined in the paperless.conf.example can be used here. The
 | 
						|
# Docker setup does not use the configuration file.
 | 
						|
# A few commonly adjusted settings are provided below.
 | 
						|
 | 
						|
# This is required if you will be exposing Paperless-ngx on a public domain
 | 
						|
# (if doing so please consider security measures such as reverse proxy)
 | 
						|
PAPERLESS_URL=https://{{ subdomains.paper }}
 | 
						|
 | 
						|
# Adjust this key if you plan to make paperless available publicly. It should
 | 
						|
# be a very long sequence of random characters. You don't need to remember it.
 | 
						|
PAPERLESS_SECRET_KEY={{ vault_paperlessngx.secret_key }}
 | 
						|
 | 
						|
# Use this variable to set a timezone for the Paperless Docker containers. If not specified, defaults to UTC.
 | 
						|
PAPERLESS_TIME_ZONE=America/Denver
 | 
						|
 | 
						|
# The default language to use for OCR. Set this to the language most of your
 | 
						|
# documents are written in.
 | 
						|
#PAPERLESS_OCR_LANGUAGE=eng
 | 
						|
 | 
						|
# Set if accessing paperless via a domain subpath e.g. https://domain.com/PATHPREFIX and using a reverse-proxy like traefik or nginx
 | 
						|
#PAPERLESS_FORCE_SCRIPT_NAME=/PATHPREFIX
 | 
						|
#PAPERLESS_STATIC_URL=/PATHPREFIX/static/ # trailing slash required
 | 
						|
 | 
						|
# authentik
 | 
						|
PAPERLESS_APPS: "allauth.socialaccount.providers.openid_connect"
 | 
						|
PAPERLESS_SOCIALACCOUNT_PROVIDERS: '{"openid_connect": {"APPS": [{"provider_id": "authentik","name": "Authentik SSO","client_id": "{{ vault_paperlessngx.oidc.client_id }}","secret": "{{ vault_paperlessngx.oidc.client_secret }}","settings": { "server_url": "https://{{ subdomains.auth }}/application/o/paperlessngx/.well-known/openid-configuration"}}]}}' |