Josep Piguillem
d43fc620e9
Owners and admins can point a project at other systems: a signed JSON POST (HMAC-SHA256 of the body) when tickets, comments, releases or sprints change, filtered by event or family. Deliveries are retried a couple of times, the last one is shown, and a ping can be sent from the settings. Private addresses are refused unless WEBHOOKS_ALLOW_PRIVATE is set. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
62 lines
2.4 KiB
Plaintext
62 lines
2.4 KiB
Plaintext
PORT=3000
|
|
|
|
# Write model (commands)
|
|
POSTGRES_URL=postgres://taskstream:taskstream@localhost:5432/taskstream
|
|
# Creates/updates tables from the entities. Use migrations in production.
|
|
POSTGRES_SYNCHRONIZE=true
|
|
|
|
# Read model (queries)
|
|
MONGO_URL=mongodb://localhost:27017/taskstream_read
|
|
|
|
# Event stream (write → read), GraphQL pub/sub and session cache
|
|
REDIS_URL=redis://localhost:6379
|
|
EVENT_STREAM_KEY=task-stream:events
|
|
# Set to false on API-only instances when the events bridge (projections) runs elsewhere
|
|
EVENTS_BRIDGE_ENABLED=true
|
|
|
|
# Pireon identity server (https://oauth.pireon.dev/api/documentation)
|
|
PIREON_BASE_URL=https://oauth.pireon.dev
|
|
# Secret returned when registering the webhook (POST /api/clients/{client}/webhooks)
|
|
PIREON_WEBHOOK_SECRET=
|
|
# OAuth clients of task-stream in Pireon (POST /api/clients). Each Pireon client allows ONE grant type:
|
|
# authorization_code → "Sign in with Pireon" and Swagger UI. Redirect URIs to register:
|
|
# http://localhost:4200/auth/callback, http://localhost:3000/api/docs/oauth2-redirect.html
|
|
PIREON_CLIENT_ID=
|
|
PIREON_CLIENT_SECRET=
|
|
# password → email + password sign-in (defaults to the client above when empty)
|
|
PIREON_PASSWORD_CLIENT_ID=
|
|
PIREON_PASSWORD_CLIENT_SECRET=
|
|
PIREON_SCOPES=users:read
|
|
PIREON_PASSWORD_GRANT=true
|
|
AUTH_SESSION_TTL_SECONDS=60
|
|
|
|
GRAPHQL_PLAYGROUND=true
|
|
|
|
# REST + OpenAPI for other apps (Swagger UI at /api/docs). The document is also written to OPENAPI_FILE.
|
|
SWAGGER_ENABLED=true
|
|
OPENAPI_FILE=apps/api/openapi.json
|
|
|
|
# Files attached to tickets: folder (a volume in Docker) and size limit per file.
|
|
ATTACHMENTS_DIR=data/attachments
|
|
ATTACHMENTS_MAX_MB=25
|
|
|
|
# Optional e-mail copies of notifications. Without SMTP_URL nothing is sent.
|
|
SMTP_URL=
|
|
MAIL_FROM=
|
|
WEB_URL=http://localhost:4200
|
|
|
|
# Outgoing webhooks refuse hosts on this machine or its private network unless true.
|
|
WEBHOOKS_ALLOW_PRIVATE=false
|
|
|
|
# Docker builds only: token of Pireon's Nexus for @pi/ui (build secret, never stored in an image).
|
|
# Locally: export NEXUS_TOKEN=$(grep '^//nexus.pireon.dev/repository/npm-releases/:_authToken=' ~/.npmrc | cut -d= -f2-)
|
|
NEXUS_TOKEN=
|
|
|
|
# MCP server (apps/mcp, docs/09-mcp.md). Port: not PORT, which is the API's.
|
|
MCP_PORT=3010
|
|
TASKSTREAM_API_URL=http://localhost:3000
|
|
# Domains it answers on, comma-separated (DNS rebinding protection). Empty: localhost only.
|
|
MCP_ALLOWED_HOSTS=
|
|
# error | warn | log | debug | verbose (warn: the library logs every tool on every call otherwise)
|
|
MCP_LOG_LEVEL=warn
|