enricobuehler
af74c9ca67
windows-host / package (push) Has been cancelled
flatpak / build-publish (push) Has been cancelled
docker / build-push (--build-arg FEDORA_VERSION=44, ci, ci/fedora-rpm.Dockerfile, punktfunk-fedora44-rpm) (push) Has been cancelled
web-screenshots / screenshots (push) Has been cancelled
rpm / build-publish (bazzite, punktfunk-fedora-rpm) (push) Has been cancelled
rpm / build-publish (fedora-44, punktfunk-fedora44-rpm) (push) Has been cancelled
release / apple (push) Has been cancelled
linux-client-screenshots / screenshots (push) Has been cancelled
windows-msix / package (arm64, C:\Users\Public\ffmpeg-arm64, aarch64-pc-windows-msvc, C:\t-a64) (push) Has been cancelled
windows-msix / package (x64, C:\Users\Public\ffmpeg, x86_64-pc-windows-msvc, C:\t) (push) Has been cancelled
decky / build-publish (push) Has been cancelled
deb / build-publish (push) Has been cancelled
android / android (push) Has been cancelled
docker / build-push (., web/Dockerfile, punktfunk-web) (push) Has been cancelled
docker / build-push (ci, ci/fedora-rpm.Dockerfile, punktfunk-fedora-rpm) (push) Has been cancelled
docker / build-push (ci, ci/rust-ci.Dockerfile, punktfunk-rust-ci) (push) Has been cancelled
docker / build-push (docs-site, docs-site/Dockerfile, punktfunk-docs) (push) Has been cancelled
docker / deploy-docs (push) Has been cancelled
android-screenshots / screenshots (push) Has been cancelled
Port 3000 collides with half the dev-server ecosystem; 47992 sits next to the mgmt API (47990) in the punktfunk port family. Updates the run scripts, systemd/scheduled-task units, Dockerfile, Windows firewall rule + installer, packaging, and every doc that referenced :3000. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
33 lines
1.8 KiB
Bash
33 lines
1.8 KiB
Bash
# punktfunk web console — packaged config reference.
|
|
#
|
|
# On a `apt install punktfunk-web` install you DO NOT edit anything: the systemd --user units wire
|
|
# everything automatically —
|
|
# punktfunk-web.service sets PUNKTFUNK_MGMT_URL=https://127.0.0.1:47990, NODE_TLS_REJECT_UNAUTHORIZED=0,
|
|
# PORT=47992, HOST=0.0.0.0, the PUNKTFUNK_UI_TLS_* cert paths + PUNKTFUNK_UI_SECURE=1, and sources:
|
|
# ~/.config/punktfunk/mgmt-token (written by the host's `serve` — the shared bearer token)
|
|
# ~/.config/punktfunk/web-password (written by punktfunk-web-init — the console login password)
|
|
# ~/.config/punktfunk/{cert,key}.pem (the host identity — the console serves HTTPS with it)
|
|
#
|
|
# This file documents the variables for a MANUAL deploy (running `bun .output/server/index.mjs`
|
|
# yourself — the console runs on bun: `Bun.serve` is a Bun API, node can't run it). The mgmt API is
|
|
# HTTPS with the host's self-signed loopback cert, so the proxy needs NODE_TLS_REJECT_UNAUTHORIZED=0
|
|
# (its only outbound TLS hop is that loopback connection).
|
|
PUNKTFUNK_MGMT_URL=https://127.0.0.1:47990
|
|
NODE_TLS_REJECT_UNAUTHORIZED=0
|
|
PORT=47992
|
|
HOST=0.0.0.0
|
|
|
|
# Serve the console over HTTPS (HTTP/1.1 over TLS) with the host's own identity cert. BOTH paths
|
|
# set ⇒ HTTPS. (No HTTP/2 or HTTP/3: Bun.serve has no HTTP/2 server, and a browser won't speak
|
|
# HTTP/3/QUIC against this self-signed, no-SAN host cert — so HTTP/1.1 over TLS is what's offered.)
|
|
PUNKTFUNK_UI_TLS_CERT=%h/.config/punktfunk/cert.pem
|
|
PUNKTFUNK_UI_TLS_KEY=%h/.config/punktfunk/key.pem
|
|
# Mark the session cookie Secure (required once served over TLS):
|
|
PUNKTFUNK_UI_SECURE=1
|
|
|
|
# Match the host's ~/.config/punktfunk/mgmt-token (auto-generated by the host if unset):
|
|
PUNKTFUNK_MGMT_TOKEN=
|
|
|
|
# Console login password (fails closed if unset on the built server):
|
|
PUNKTFUNK_UI_PASSWORD=
|