docs(install): cover Docker and native deployments

2026-09-20 17:09:14 +12:00
parent 4aba89c063
commit 76b2b8d879
16 changed files with 1141 additions and 53 deletions
@@ -0,0 +1,13 @@
+# Copy to /etc/magent/backend.env, owned by root with mode 0600.
+# Generate independent secrets; these placeholders must never be deployed.
+JWT_SECRET=REPLACE_WITH_INDEPENDENT_RANDOM_TOKEN
+SETTINGS_ENCRYPTION_KEY=REPLACE_WITH_FERNET_KEY
+SETUP_TOKEN=REPLACE_WITH_ANOTHER_RANDOM_TOKEN
+MAGENT_MANAGED_SECRETS=false
+MAGENT_APPLICATION_URL=https://magent.example.com
+CORS_ALLOW_ORIGIN=https://magent.example.com
+AUTH_COOKIE_SECURE=true
+API_DOCS_ENABLED=false
+SQLITE_PATH=/var/lib/magent/data/magent.db
+LOG_FILE=/var/lib/magent/data/magent.log
+BRANDING_SOURCE=data
@@ -0,0 +1,26 @@
+[Unit]
+Description=Magent API
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+User=magent
+Group=magent
+WorkingDirectory=/var/lib/magent
+EnvironmentFile=/etc/magent/backend.env
+Environment=PYTHONDONTWRITEBYTECODE=1
+Environment=PYTHONUNBUFFERED=1
+ExecStart=/opt/magent/.venv/bin/python -m uvicorn app.main:app --app-dir /opt/magent/backend --host 127.0.0.1 --port 8000 --workers 1
+Restart=on-failure
+RestartSec=5
+TimeoutStopSec=30
+UMask=0077
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/var/lib/magent/data
+
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1,8 @@
+# Copy to /etc/magent/frontend.env. This file must not contain backend secrets.
+NODE_ENV=production
+NEXT_TELEMETRY_DISABLED=1
+HOSTNAME=127.0.0.1
+PORT=3000
+NEXT_PUBLIC_API_BASE=/api
+BACKEND_INTERNAL_URL=http://127.0.0.1:8000
+MAGENT_APPLICATION_URL=https://magent.example.com
@@ -0,0 +1,25 @@
+[Unit]
+Description=Magent web frontend
+Wants=network-online.target magent-backend.service
+After=network-online.target magent-backend.service
+
+[Service]
+Type=simple
+User=magent
+Group=magent
+WorkingDirectory=/opt/magent/frontend
+EnvironmentFile=/etc/magent/frontend.env
+# If command -v node reports another system-wide path, update this line.
+ExecStart=/usr/bin/node /opt/magent/frontend/.next/standalone/server.js
+Restart=on-failure
+RestartSec=5
+TimeoutStopSec=30
+UMask=0077
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/opt/magent/frontend/.next/standalone/.next/cache
+
+[Install]
+WantedBy=multi-user.target