PhilandClaude Opus 5.5
6dfb58d3f1
StarPunk 2.0.0 logs in with Pocket ID and issues its own Micropub tokens (ADR-064 in the StarPunk repo), so the Gondulf IndieAuth server is no longer used. Removes its task, templates, Caddy route, subdomain and service entry, and moves its DNS record to removed_records. The StarPunk template was still on v1.6.0-rc.2 with Gondulf hairpin hosts; deploying it would have broken login. It now matches production: v2.0.0, Pocket ID hairpin, OIDC client from vault_starpunk.pocketid and the admin sub in starpunk_admin_sub. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
39 lines
1.3 KiB
Django/Jinja
39 lines
1.3 KiB
Django/Jinja
services:
|
|
starpunk:
|
|
image: git.thesatelliteoflove.com/phil/starpunk:v2.0.0
|
|
container_name: starpunk
|
|
restart: unless-stopped
|
|
extra_hosts:
|
|
- '{{ subdomains.pocketid }}:{{ docker.hairpin_ip }}'
|
|
- '{{ primary_domain }}:{{ docker.hairpin_ip }}'
|
|
volumes:
|
|
- starpunk-data:/data
|
|
environment:
|
|
# Site configuration
|
|
SITE_URL: https://{{ subdomains.starpunk }}
|
|
SITE_NAME: StarPunk
|
|
SITE_AUTHOR: Mr Whiskers
|
|
SITE_DESCRIPTION: Starpunk instance
|
|
# Site owner identity (h-card source, Micropub "me")
|
|
ADMIN_ME: https://{{ primary_domain }}
|
|
SESSION_SECRET: {{ vault_starpunk.session_secret }}
|
|
# Admin login via Pocket ID (client "StarPunk"); only this user may log in.
|
|
# StarPunk issues Micropub tokens itself (ADR-064).
|
|
OIDC_ISSUER: https://{{ subdomains.pocketid }}
|
|
OIDC_CLIENT_ID: {{ vault_starpunk.pocketid.client_id }}
|
|
OIDC_CLIENT_SECRET: {{ vault_starpunk.pocketid.client_secret }}
|
|
OIDC_ADMIN_SUB: {{ starpunk_admin_sub }}
|
|
OIDC_PROVIDER_NAME: Pocket ID
|
|
# Production settings
|
|
FLASK_ENV: production
|
|
FLASK_DEBUG: 0
|
|
LOG_LEVEL: INFO
|
|
DEV_MODE: false
|
|
volumes:
|
|
# Existing volume (starpunk_starpunk-data) holds the posts and database
|
|
starpunk-data:
|
|
networks:
|
|
default:
|
|
external: true
|
|
name: {{ docker.network_name }}
|