50923cf56d
Backend: - Add file_handlers.go: presigned upload/download for item attachments - Add item_files.go: item file and thumbnail DB operations - Add migration 011: item_files table and thumbnail_key column - Update items/projects/relationships DB with extended field support - Update routes: React SPA serving from web/dist, file upload endpoints - Update auth handlers and middleware for cookie + bearer token auth - Remove Go HTML templates (replaced by React SPA) - Update storage client for presigned URL generation Frontend: - Add TagInput component for tag/keyword entry - Add SVG assets for Silo branding and UI icons - Update API client and types for file uploads, auth, extended fields - Update AuthContext for session-based auth flow - Update LoginPage, ProjectsPage, SchemasPage, SettingsPage - Fix tsconfig.node.json Deployment: - Update config.prod.yaml: single-binary SPA layout at /opt/silo - Update silod.service: ReadOnlyPaths for /opt/silo - Add scripts/deploy.sh: build, package, ship, migrate, start - Update docker-compose.yaml and Dockerfile - Add frontend-spec.md design document
77 lines
2.1 KiB
YAML
77 lines
2.1 KiB
YAML
# Silo Production Configuration
|
|
# Single-binary deployment: silod serves API + React SPA
|
|
#
|
|
# Layout on silo.kindred.internal:
|
|
# /opt/silo/bin/silod - server binary
|
|
# /opt/silo/web/dist/ - built React frontend (served automatically)
|
|
# /opt/silo/schemas/ - part number schemas
|
|
# /etc/silo/config.yaml - this file
|
|
# /etc/silo/silod.env - secrets (env vars)
|
|
#
|
|
# Credentials via environment variables (set in /etc/silo/silod.env):
|
|
# SILO_DB_PASSWORD
|
|
# SILO_MINIO_ACCESS_KEY
|
|
# SILO_MINIO_SECRET_KEY
|
|
# SILO_SESSION_SECRET
|
|
# SILO_ADMIN_PASSWORD
|
|
|
|
server:
|
|
host: "0.0.0.0"
|
|
port: 8080
|
|
base_url: "https://silo.kindred.internal"
|
|
|
|
database:
|
|
host: "psql.kindred.internal"
|
|
port: 5432
|
|
name: "silo"
|
|
user: "silo"
|
|
password: "" # Set via SILO_DB_PASSWORD
|
|
sslmode: "require"
|
|
max_connections: 20
|
|
|
|
storage:
|
|
endpoint: "minio.kindred.internal:9000"
|
|
access_key: "" # Set via SILO_MINIO_ACCESS_KEY
|
|
secret_key: "" # Set via SILO_MINIO_SECRET_KEY
|
|
bucket: "silo-files"
|
|
use_ssl: true
|
|
region: "us-east-1"
|
|
|
|
schemas:
|
|
directory: "/opt/silo/schemas"
|
|
default: "kindred-rd"
|
|
|
|
freecad:
|
|
uri_scheme: "silo"
|
|
|
|
auth:
|
|
enabled: true
|
|
session_secret: "" # Set via SILO_SESSION_SECRET
|
|
local:
|
|
enabled: true
|
|
default_admin_username: "admin"
|
|
default_admin_password: "" # Set via SILO_ADMIN_PASSWORD
|
|
ldap:
|
|
enabled: true
|
|
url: "ldaps://ipa.kindred.internal"
|
|
base_dn: "dc=kindred,dc=internal"
|
|
user_search_dn: "cn=users,cn=accounts,dc=kindred,dc=internal"
|
|
user_attr: "uid"
|
|
email_attr: "mail"
|
|
display_attr: "displayName"
|
|
group_attr: "memberOf"
|
|
role_mapping:
|
|
admin:
|
|
- "cn=silo-admins,cn=groups,cn=accounts,dc=kindred,dc=internal"
|
|
editor:
|
|
- "cn=silo-users,cn=groups,cn=accounts,dc=kindred,dc=internal"
|
|
- "cn=engineers,cn=groups,cn=accounts,dc=kindred,dc=internal"
|
|
viewer:
|
|
- "cn=silo-viewers,cn=groups,cn=accounts,dc=kindred,dc=internal"
|
|
tls_skip_verify: false
|
|
oidc:
|
|
enabled: false
|
|
cors:
|
|
allowed_origins:
|
|
- "https://silo.kindred.internal"
|