lzstealth/pulse-signage
1
0 Fork 0
Code Issues Pull Requests Actions Packages Activity

Release v2.20.4
Publish Docker Image / build-and-push-existing-registry (./build/Dockerfile, web, pulse-signage-web) (push) Successful in 1m22s
Details
Publish Docker Image / build-and-push-existing-registry (./build/Dockerfile.player, player, pulse-signage-player) (push) Successful in 33s
Details

Browse Source
This commit is contained in:
lzstealth committed 2026-10-25 20:47:38 +00:00
1 parent 7228406929
commit e6c48c6340
10 files changed
+95 -7
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docker-compose/.env.example
+1
View File
@@ -6,6 +6,7 @@ PULSE_SIGNAGE_PLAYER_IMAGE="git.lzstealth.com/lzstealth/pulse-signage-player:lat
PULSE_SIGNAGE_SHARED_SECRET=""
AUTH_SECRET="REPLACE_WITH_A_RANDOM_SECRET_OF_AT_LEAST_32_CHARACTERS"
AUTH_TRUSTED_ORIGINS="http://localhost:8080,http://127.0.0.1:8080"
AUTH_TRUSTED_PROXIES=""
# Database
DB_HOST="mysql"
docker-compose/README.md
+3
View File
@@ -62,12 +62,15 @@ Key configuration:
- `PULSE_SIGNAGE_SHARED_SECRET`
- `AUTH_SECRET` (generate with `openssl rand -base64 32` and keep stable across restarts)
- `AUTH_TRUSTED_ORIGINS` (comma-separated extra browser origins, such as local `localhost` URLs)
- `AUTH_TRUSTED_PROXIES` (optional comma-separated proxy IP addresses or CIDR ranges; leave empty for direct access)
- `WEB_PUBLIC_URL`
- `BRIDGE_INTERNAL_URL`
- `DEFAULT_ADMIN_USERNAME`
- `DEFAULT_ADMIN_NAME`
- `DEFAULT_ADMIN_PASSWORD`
For reverse-proxy deployments, set `AUTH_TRUSTED_PROXIES` to the actual proxy addresses or narrowly scoped proxy networks present in the forwarded IP chain. Better Auth uses these to resolve multi-address `X-Forwarded-For` headers for session IPs and per-client rate limits. For example, `AUTH_TRUSTED_PROXIES="192.0.2.10,198.51.100.0/24"` illustrates the format; replace these documentation addresses with your own. Do not use browser origins, trust all networks, or add client networks just to suppress the warning. Ensure the proxy sanitizes forwarded headers and clients cannot bypass it. Recreate the web container after changing the environment. Local development reads this setting from `docker-compose/.local.env`.
### `player`
The screen runtime that renders playlists and receives commands.
docker-compose/docker-compose.yml
+1
View File
@@ -17,6 +17,7 @@ services:
PULSE_SIGNAGE_SHARED_SECRET: ${PULSE_SIGNAGE_SHARED_SECRET:-}
AUTH_SECRET: ${AUTH_SECRET:?Set a random AUTH_SECRET in .env}
AUTH_TRUSTED_ORIGINS: ${AUTH_TRUSTED_ORIGINS:-http://localhost:8080,http://127.0.0.1:8080}
AUTH_TRUSTED_PROXIES: ${AUTH_TRUSTED_PROXIES:-}
WEB_PUBLIC_URL: ${WEB_PUBLIC_URL:-http://localhost:8080}
BRIDGE_INTERNAL_URL: ${BRIDGE_INTERNAL_URL:-http://player-bridge:8090}
DEFAULT_ADMIN_USERNAME: ${DEFAULT_ADMIN_USERNAME:-admin}