Configuration and deployment# Configuration and deployment ## Structuring variables `APP_ENV`, `APP_DEBUG`, `APP_SECRET`, `APP_URL`, `DATABASE_URL`, `REDIS_URL`, `MESSENGER_TRANSPORT_DSN`, JWT keys and `VITE_API_URL`. Never publish `.env` or a secret value. ## HTTPS and reverse proxy Docker serves HTTP on `8080`. Model `nginx.conf.example` terminates TLS 1.2/1.3, redirects HTTP, enables HSTS, and passes HTTPS context. `APP_URL` must match the public origin for OAuth callbacks. ## Persistence and services Back up PostgreSQL, Redis, `isms_document_files` and `jwt_keys`. The worker processes emails; The scheduler expires acceptances and recalls journals. Mailpit is disabled in production. Compose profiles `object-storage` and `antivirus` optionally enable MinIO and ClamAV. Run migrations on each release and check `/api/health`. Never load fixtures in production. ## Step-by-step deployment 1. Prepare DNS and certificate. 2. Create `.env` from the example without versioning it. 3. Set unique secrets and `APP_
RiskPilot
Website
FR
GitHub