You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/web-application/how-to/deployment.mdx
+4-3Lines changed: 4 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -30,7 +30,7 @@ Before exposing html2rss-web, ensure:
30
30
- Inbound TCP ports 80 and 443 reach the host (check firewalls and cloud security groups)
31
31
- You are ready to watch the first deployment logs for certificate issuance
32
32
- You have a value ready for `HTML2RSS_SECRET_KEY`
33
-
- You have a value ready for `HEALTH_CHECK_TOKEN`(required by the documented Compose stack)
33
+
- You have a value ready for `HEALTH_CHECK_TOKEN`if you plan to monitor authenticated `GET /api/v1/health` (the documented Compose stack uses it; `/api/v1/health/live` and `/api/v1/health/ready` do not require it)
34
34
35
35
If you plan to enable automatic feed generation, also prepare:
36
36
@@ -82,7 +82,7 @@ Caddy handles certificates and redirects with almost no configuration.
82
82
- Update your `.env` before starting the stack:
83
83
- Set `CADDY_HOST` for your domain.
84
84
- Generate a production secret (`openssl rand -hex 32`) and assign it to `HTML2RSS_SECRET_KEY`.
85
-
- Set a strong `HEALTH_CHECK_TOKEN`(required by the documented Compose stack).
85
+
- Set a strong `HEALTH_CHECK_TOKEN`when you use authenticated `GET /api/v1/health`; liveness/readiness probes can use `/api/v1/health/live` and `/api/v1/health/ready` without it.
86
86
- Set `BUILD_TAG` and `GIT_SHA` to real release metadata for production.
87
87
- Adjust optional knobs such as `AUTO_SOURCE_ENABLED` and `SENTRY_DSN` as needed; refer to the [environment reference](/web-application/reference/env-variables) for details.
88
88
- After `docker compose up -d`, run `docker compose logs caddy --tail 20`; look for `certificate obtained`.
@@ -94,6 +94,7 @@ Caddy handles certificates and redirects with almost no configuration.
94
94
Harden the application before inviting other users:
95
95
96
96
- Set a strong `HEALTH_CHECK_TOKEN` for authenticated `GET /api/v1/health`, and strong credentials for any protected feeds
97
+
- Set a strong `HEALTH_CHECK_TOKEN` for authenticated `GET /api/v1/health`, and separate strong bearer tokens for any protected feeds
97
98
- Prefer environment files (`.env`) stored outside version control for secrets
98
99
- Keep any operator-only token distribution flow outside public docs and outside version control
99
100
@@ -114,7 +115,7 @@ Keep the instance healthy once it is in production:
114
115
115
116
<DockerComposeSnippetvariant="watchtower" />
116
117
117
-
This Watchtower shape updates all containers in the Docker host by default (not only `html2rss-web`).
118
+
This Watchtower shape scopes updates to `html2rss-web`, `browserless`, and `caddy`; replace service names if your stack differs.
118
119
119
120
Check `docker compose logs watchtower` occasionally to confirm updates are applied.
|`HTML2RSS_SECRET_KEY`| required in production; development/test gets a temporary default |
11
-
|`HEALTH_CHECK_TOKEN`| bearer token for authenticated `GET /api/v1/health`; required by the documented Compose stack, but custom stacks that probe only `/api/v1/health/live` and `/api/v1/health/ready`can omit it |
12
-
|`BUILD_TAG`| defaults to `local` in the Compose stack; set release metadata explicitly in production |
13
-
|`GIT_SHA`| defaults to `local` in the Compose stack; set deployed commit SHA explicitly in production |
14
-
|`SENTRY_DSN`| optional; enables Sentry errors/logs when set |
15
-
|`BROWSERLESS_IO_WEBSOCKET_URL`| optional; Browserless websocket endpoint for `browserless` strategy |
16
-
|`BROWSERLESS_IO_API_TOKEN`| required by this site's Compose stack and by custom websocket endpoints; standalone `html2rss` local defaults can omit it |
17
-
|`AUTO_SOURCE_ENABLED`|`true` by default in development/test, `false` otherwise |
|`HTML2RSS_SECRET_KEY`| required in production; development/test gets a temporary default |
11
+
|`HEALTH_CHECK_TOKEN`| bearer token for authenticated `GET /api/v1/health`; optional unless you use that endpoint (the documented Compose stack includes it); `/api/v1/health/live` and `/api/v1/health/ready`do not require it |
12
+
|`BUILD_TAG`| defaults to `local` in the Compose stack; set release metadata explicitly in production |
13
+
|`GIT_SHA`| defaults to `local` in the Compose stack; set deployed commit SHA explicitly in production |
14
+
|`SENTRY_DSN`| optional; enables Sentry errors/logs when set |
15
+
|`BROWSERLESS_IO_WEBSOCKET_URL`| optional; Browserless websocket endpoint for `browserless` strategy |
16
+
|`BROWSERLESS_IO_API_TOKEN`| required by this site's Compose stack and by custom websocket endpoints; standalone `html2rss` local defaults can omit it |
17
+
|`AUTO_SOURCE_ENABLED`|`true` by default in development/test, `false` otherwise |
Older environment-variable examples from previous docs revisions are obsolete. Use only the supported table above and the `Environment & Runtime Flags` table in [`html2rss-web/docs/README.md`](https://github.com/html2rss/html2rss-web/blob/main/docs/README.md).
0 commit comments