Move all sensitive and configurable values out of compose.yaml
into a .env file (mode 0600). compose.yaml now uses ${VAR}
substitution with no embedded secrets. Added planka.env.j2
template and a dedicated Deploy .env task in the playbook.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
14 lines
594 B
Django/Jinja
14 lines
594 B
Django/Jinja
# Planka environment — managed by Ansible, do not edit manually
|
|
BASE_URL={{ planka_base_url }}
|
|
SECRET_KEY={{ planka_secret_key }}
|
|
INTERNAL_ACCESS_TOKEN={{ planka_access_token }}
|
|
LOG_LEVEL={{ planka_log_level }}
|
|
TRUST_PROXY={{ planka_trust_proxy | lower }}
|
|
TOKEN_EXPIRES_IN={{ planka_token_expires_in }}
|
|
DEFAULT_ADMIN_EMAIL={{ planka_admin_email }}
|
|
DEFAULT_ADMIN_PASSWORD={{ planka_admin_password }}
|
|
DEFAULT_ADMIN_NAME={{ planka_admin_name }}
|
|
DEFAULT_ADMIN_USERNAME={{ planka_admin_username }}
|
|
PLANKA_VERSION={{ planka_version }}
|
|
PLANKA_PORT={{ planka_port }}
|
|
POSTGRES_DB={{ planka_db_name }}
|