From 72528f01efc6265ccf268219f3c301579c72895a Mon Sep 17 00:00:00 2001 From: Lilleman auf Larv Date: Sat, 31 Oct 2026 10:25:19 +0100 Subject: [PATCH] =?UTF-8?q?Answer=20architecture=20round=201:=200=20?= =?UTF-8?q?=F0=9F=94=B4,=202=20=F0=9F=9F=A1=20(0=20misread);=20CACHE=5FTEM?= =?UTF-8?q?PLATES=20also=20caches=20/public/=20asset=20versions,=20the=20s?= =?UTF-8?q?erve=20path=20hashes=20without=20a=20sync=20read?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 2 +- release-tooling/dockerhub-overview.md.tmpl | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index fe4dca5..dadb06e 100644 --- a/README.md +++ b/README.md @@ -1198,7 +1198,7 @@ The app is **environment-agnostic**: no `NODE_ENV`, every behaviour its own expl | --- | --- | --- | | `APP_URL` | _unset_ (dev: `http://localhost:3000`) | the canonical public URL — the **single source** for the host this deployment lives on; set ⇒ off-host visitors are redirected here, unset ⇒ no redirect (see [Canonical host](#canonical-host-one-public-url)) | | `PORT` | `3000` | web listen port | -| `CACHE_TEMPLATES` | `false` | cache compiled EJS templates (`true` in prod) | +| `CACHE_TEMPLATES` | `false` | cache compiled EJS templates and `/public/` asset versions (`true` in prod) | | `SECURE_COOKIES` | `false` | mark our session/CSRF cookies `Secure` (`true` in prod https; off in dev http) | | `REQUIRE_SECURE_SECRETS` | `false` | when `true`, `CSRF_SECRET` — and `PLUGIN_DB_SECRET` once storage is configured, and every plugin setting declared `secret` — must be supplied and differ from the dev throwaway | | `LOG_LEVEL` | `info` | min severity logged: `error`/`warn`/`info`/`verbose`/`debug`/`silly`/`none` | diff --git a/release-tooling/dockerhub-overview.md.tmpl b/release-tooling/dockerhub-overview.md.tmpl index ab75302..c2034bf 100644 --- a/release-tooling/dockerhub-overview.md.tmpl +++ b/release-tooling/dockerhub-overview.md.tmpl @@ -163,7 +163,7 @@ Every behaviour is an explicit env toggle read at boot — no `NODE_ENV`. The co | --- | --- | --- | | `ADMIN_EMAIL` / `ADMIN_PASSWORD` | `admin@plainpages.local` / `admin` | the seeded first admin (bootstrap service) | | `APP_URL` | unset | canonical public URL; off-host visitors are redirected to it | -| `CACHE_TEMPLATES` | `false` | cache compiled templates (`true` in prod) | +| `CACHE_TEMPLATES` | `false` | cache compiled templates and `/public/` asset versions (`true` in prod) | | `CSRF_SECRET` | dev throwaway | signs the CSRF token — set a real one in prod | | `KRATOS_*` / `KETO_*` / `HYDRA_*` URLs | compose defaults | the Ory sidecar endpoints | | `LOG_FORMAT` / `LOG_LEVEL` | `text` / `info` | `json` for structured prod logs |