Release 2.6.7

2026-08-08 13:02:31 +01:00
parent b20beb250b
commit 7e46fffc34
41 changed files with 2489 additions and 1290 deletions
@@ -12,15 +12,15 @@ MYSQL_ROOT_PASSWORD="root_password"

 # Player settings
 PLAYER_IDENTIFIER="player-local"
-PLAYER_PUBLIC_BASE_URL="http://localhost:8081"
-PLAYER_INTERNAL_BASE_URL="http://player:8081"
+PLAYER_PUBLIC_URL="http://localhost:8081"
+PLAYER_INTERNAL_URL="http://player:8081"

 # Web app bootstrap settings
 SESSION_MAX_AGE_DAYS=14
 DEFAULT_ADMIN_USERNAME="admin"
 DEFAULT_ADMIN_NAME="Admin"
-DEFAULT_ADMIN_PASSWORD="admin"
-PASSWORD_HASH_ITERATIONS=310000
+DEFAULT_ADMIN_PASSWORD="password123"

 # Bridge settings for the player-bridge service
-WEB_BASE_URL="http://web:8080"
+WEB_INTERNAL_URL="http://web:8080"
+BRIDGE_INTERNAL_URL="http://player-bridge:8090"
@@ -4,8 +4,8 @@ PULSE_SIGNAGE_SHARED_SECRET=""

 # Player settings
 PLAYER_IDENTIFIER="player-remote"
-PLAYER_PUBLIC_BASE_URL="http://localhost:8081"
+PLAYER_PUBLIC_URL="http://localhost:8081"
 PLAYER_AGENT_RECONNECT_DELAY_MS=5000

 # Remote player connectivity settings
-THIN_CLIENT_BASE_URL="http://player-agent:8090"
+BRIDGE_PUBLIC_URL="http://player-bridge.example.com:8090"
@@ -59,15 +59,16 @@ Responsibilities:

 - serves the player UI on port `8081`
 - connects to MySQL in local mode
- connects to the bridge in remote mode through `THIN_CLIENT_BASE_URL`
+- connects to the bridge in remote mode through `BRIDGE_PUBLIC_URL`
 - registers live connections and accepts control commands

 Key configuration:

- `PLAYER_PUBLIC_BASE_URL`
- `PLAYER_INTERNAL_BASE_URL`
+- `PLAYER_PUBLIC_URL`
+- `PLAYER_INTERNAL_URL`
+- `BRIDGE_INTERNAL_URL`
 - `PLAYER_IDENTIFIER`
- `THIN_CLIENT_BASE_URL` in remote mode
+- `BRIDGE_PUBLIC_URL` in remote mode
 - `PULSE_SIGNAGE_SHARED_SECRET`
 - database settings in local mode

@@ -85,7 +86,7 @@ Responsibilities:
 Key configuration:

 - `PULSE_SIGNAGE_SHARED_SECRET`
- `WEB_BASE_URL` for the bridge when it should call the web app directly instead of inferring from request headers
+- `WEB_INTERNAL_URL` for the bridge when it should call the web app directly instead of inferring from request headers
 - `DB_HOST`, `DB_PORT`, `DB_NAME`, `DB_USER`, `DB_PASSWORD`

 ### `mysql`
@@ -116,11 +117,14 @@ Important values:
 - `PULSE_SIGNAGE_SHARED_SECRET` - long random secret shared by the web, player, and bridge services for authenticated requests
 - `PLAYER_IDENTIFIER` - unique local player identifier
 - `DB_*` - MySQL credentials and database name for the stack
- `PLAYER_PUBLIC_BASE_URL` - public URL the player advertises
- `PLAYER_INTERNAL_BASE_URL` - internal URL the web app uses for local player calls
+- `PLAYER_PUBLIC_URL` - public URL the player advertises
+- `PLAYER_INTERNAL_URL` - internal URL the web app uses for local player calls
+- `BRIDGE_INTERNAL_URL` - bridge URL the web app uses for player snapshot and command forwarding
+- `WEB_INTERNAL_URL` - internal URL the bridge uses to call the web app directly
 - `SESSION_MAX_AGE_DAYS` - dashboard session lifetime
 - `DEFAULT_ADMIN_*` - bootstrap admin account values
 - `PASSWORD_HASH_ITERATIONS` - password hashing cost
+- `MYSQL_ROOT_PASSWORD` - root password for the local MySQL container

 ### `.env.remote.example`

@@ -131,8 +135,8 @@ Important values:
 - `PULSE_SIGNAGE_IMAGE` - image to run on the device
 - `PULSE_SIGNAGE_SHARED_SECRET` - must match the public stack and should be the same long random value used everywhere in the deployment
 - `PLAYER_IDENTIFIER` - unique remote player identifier
- `PLAYER_PUBLIC_BASE_URL` - public URL for the remote player
- `THIN_CLIENT_BASE_URL` - bridge URL the player connects back to
+- `PLAYER_PUBLIC_URL` - public URL for the remote player
+- `BRIDGE_PUBLIC_URL` - bridge URL the player connects back to
 - `PLAYER_AGENT_RECONNECT_DELAY_MS` - reconnect delay for the player agent

 ### `PULSE_SIGNAGE_SHARED_SECRET`
@@ -166,11 +170,16 @@ Leave it blank only if you intentionally want to run without request signing in
 | `DEFAULT_ADMIN_NAME` | web | Bootstrap admin display name. |
 | `DEFAULT_ADMIN_PASSWORD` | web | Bootstrap admin password. |
 | `PASSWORD_HASH_ITERATIONS` | web | Password hashing cost. |
-| `PLAYER_INTERNAL_BASE_URL` | web, player | Internal player URL used by the dashboard and player runtime. |
-| `THIN_CLIENT_BASE_URL` | web, player, remote player | URL of the bridge service. |
-| `PLAYER_PUBLIC_BASE_URL` | player, remote player | Public URL advertised by the player. |
+| `PLAYER_INTERNAL_URL` | web, player | Internal player URL used by the dashboard and player runtime. |
+| `BRIDGE_INTERNAL_URL` | web | Bridge URL used by the web app for player snapshot and command forwarding. |
+| `WEB_INTERNAL_URL` | player-bridge | Internal web URL used by the bridge to call the dashboard app directly. |
+| `PLAYER_PUBLIC_URL` | player, remote player | Public URL advertised by the player. |
+| `BRIDGE_PUBLIC_URL` | player, remote player | URL of the bridge service. |
 | `PLAYER_IDENTIFIER` | player | Stable player identifier. |
 | `PLAYER_AGENT_RECONNECT_DELAY_MS` | remote player | Delay before reconnecting to the bridge. |
+| `MYSQL_DATABASE` | mysql | Database name used by the local MySQL container. |
+| `MYSQL_USER` | mysql | Database user used by the local MySQL container. |
+| `MYSQL_PASSWORD` | mysql | Database password used by the local MySQL container. |

 ## Ports

@@ -208,7 +217,7 @@ Each compose file creates its own named network:
 - The public stack expects the app services and MySQL to share the same `PULSE_SIGNAGE_SHARED_SECRET`.
 - A remote player must use the same `PULSE_SIGNAGE_SHARED_SECRET` as the bridge it connects to.
 - The bridge service is the dashboard-facing command path for connected remote players.
- The remote player should point `THIN_CLIENT_BASE_URL` at the bridge, not at the public web endpoint.
+- The remote player should point `BRIDGE_PUBLIC_URL` at the bridge, not at the public web endpoint.
 - The `PULSE_SIGNAGE_IMAGE` tag defaults to the published image, but it can be overridden for local builds or custom releases.

 ## Recommended Setup
@@ -10,8 +10,8 @@ services:
    ports:
      - "8081:8081"
    environment:
-      PLAYER_PUBLIC_BASE_URL: ${PLAYER_PUBLIC_BASE_URL:-http://localhost:8081}
-      THIN_CLIENT_BASE_URL: ${THIN_CLIENT_BASE_URL:-}
+      PLAYER_PUBLIC_URL: ${PLAYER_PUBLIC_URL:-http://localhost:8081}
+      BRIDGE_PUBLIC_URL: ${BRIDGE_PUBLIC_URL:-}
      PULSE_SIGNAGE_SHARED_SECRET: ${PULSE_SIGNAGE_SHARED_SECRET:-}
    volumes:
      - pulse-signage:/app/media
@@ -15,11 +15,11 @@ services:
      DB_USER: ${DB_USER:-pulse-signage}
      DB_PASSWORD: ${DB_PASSWORD:-signage_password}
      PULSE_SIGNAGE_SHARED_SECRET: ${PULSE_SIGNAGE_SHARED_SECRET:-}
+      BRIDGE_INTERNAL_URL: ${BRIDGE_INTERNAL_URL:-http://player-bridge:8090}
      SESSION_MAX_AGE_DAYS: ${SESSION_MAX_AGE_DAYS:-14}
      DEFAULT_ADMIN_USERNAME: ${DEFAULT_ADMIN_USERNAME:-admin}
      DEFAULT_ADMIN_NAME: ${DEFAULT_ADMIN_NAME:-Admin}
-      DEFAULT_ADMIN_PASSWORD: ${DEFAULT_ADMIN_PASSWORD:-admin}
-      PASSWORD_HASH_ITERATIONS: ${PASSWORD_HASH_ITERATIONS:-310000}
+      DEFAULT_ADMIN_PASSWORD: ${DEFAULT_ADMIN_PASSWORD:-password123}
    volumes:
      - pulse-signage:/app/media
    command: ["node", "src/web.js"]
@@ -35,8 +35,8 @@ services:
    ports:
      - "8081:8081"
    environment:
-      PLAYER_PUBLIC_BASE_URL: ${PLAYER_PUBLIC_BASE_URL:-http://localhost:8081}
-      PLAYER_INTERNAL_BASE_URL: ${PLAYER_INTERNAL_BASE_URL:-http://player:8081}
+      PLAYER_PUBLIC_URL: ${PLAYER_PUBLIC_URL:-http://localhost:8081}
+      PLAYER_INTERNAL_URL: ${PLAYER_INTERNAL_URL:-http://player:8081}
      PLAYER_IDENTIFIER: ${PLAYER_IDENTIFIER:-player-local}
      PULSE_SIGNAGE_SHARED_SECRET: ${PULSE_SIGNAGE_SHARED_SECRET:-}
      DB_HOST: ${DB_HOST:-mysql}
@@ -59,7 +59,7 @@ services:
    ports:
      - "8090:8090"
    environment:
-      WEB_BASE_URL: ${WEB_BASE_URL:-http://web:8080}
+      WEB_INTERNAL_URL: ${WEB_INTERNAL_URL:-http://web:8080}
      PULSE_SIGNAGE_SHARED_SECRET: ${PULSE_SIGNAGE_SHARED_SECRET:-}
      DB_HOST: ${DB_HOST:-mysql}
      DB_PORT: ${DB_PORT:-3306}