Preparation
There are some things we need to do in preparation to install this service.
Volumes
Persistent Data
This is where the service will store its own application data and ensures we can quickly update the service image.
Ensure your user has permissions to access the folder.
Environment
DB_USERBASE_URL=https://fider.example.comDATABASE_URL=postgres://fider:${DB_PASS}@db:5432/fider?sslmode=disable
EMAIL_NOREPLY
EMAIL_SMTP_HOST
EMAIL_SMTP_PORT
EMAIL_SMTP_USERNAME
EMAIL_SMTP_ENABLE_STARTTLS
DB_USER
This is the currentuser timename zonethat formattedwill usingbe used behind the tzscenes to log into the database.
For example: America/Vancouverfider_admin
BASE_URL
This is the numericURL ID ofthat the userservice accountwill onbe Debian. If you are unsure, open a terminalhosted and run:accessible through.
idFor -u
example: DATABASE_URL
fider.example.com
id -g
EMAIL_NOREPLY
This is the currentemail timeaddress zonethat formattedwill usingbe attached to email notifications and should not be replied to because the tzinbox database.is not monitored or is non existent.
For example: America/Vancouvernoreply@fider.example.com
EMAIL_SMTP_HOST
This is the numeric ID of the user account on Debian. If you are unsure, open a terminal and run:
id -u
EMAIL_SMTP_PORT
This is the numeric ID of the user account's group on Debian. If you are unsure, open a terminal and run:
id -g
EMAIL_SMTP_USERNAME
This is the current time zone formatted using the tz database.
For example: America/Vancouver
EMAIL_SMTP_ENABLE_STARTTLS
This is the numeric ID of the user account on Debian. If you are unsure, open a terminal and run:
id -u
Passwords
Keep these securely stored in a password manager, such as VaultWarden.
DB_PASS
This is the password that will be used for root access to the database.
It is important to use secure, randomly generated password.
You can use a random alphanumeric string from a password manager, or open the terminal and run the command:
tr -dc 'A-Za-z0-9!"#$%&'\''()*+,-./:;<=>?@[\]^_`{|}~' </dev/urandom | head -c 32; echo
This pulls a random string from the 'urandom' device, removes unwanted characters and trim it to an appropriate length.
JWT_SECRET
This is the secret that will be used for validating users who are logged into the service.
It is important to use secure, randomly generated token.
You can use a random alphanumeric string from a password manager, or open the terminal and run the command:
tr -dc 'A-Za-z0-9!' </dev/urandom | head -c 32; echo
This pulls a random string from the 'urandom' device, removes unwanted characters and trim it to an appropriate length.
EMAIL_SMTP_PASSWORD
This is the password for logging into your email account for sending administrative notifications.
When possible, you should use app passwords.