soconnor/manyangles
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Document Garage key initialization in Coolify

Browse Source
This commit is contained in:
soconnor
2026-09-09 18:01:08 -04:00
parent 64d7acc9c0
commit 28584e31c6
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/deployment.md
+4
View File
@@ -12,6 +12,10 @@ to the app/auth and browser storage endpoint respectively. Route web to port
services are public; do not expose Postgres or Garage's admin/RPC ports. services are public; do not expose Postgres or Garage's admin/RPC ports.
Set `EMAIL_FROM`, `RESEND_API_KEY`, and `RESEND_WEBHOOK_SECRET` in Coolify before Set `EMAIL_FROM`, `RESEND_API_KEY`, and `RESEND_WEBHOOK_SECRET` in Coolify before
starting. Generated credentials belong to this stack, not other applications. starting. Generated credentials belong to this stack, not other applications.
Coolify does not generate 24-character hex values automatically: initialize
`SERVICE_HEX_24_S3KEY` with 12 cryptographically random bytes encoded as hex
before the first deployment. The Compose file adds Garage's `GK` prefix.
Keep that identifier and all storage secrets stable across redeployments.
Keep worker concurrency at one initially on a shared VM. Back up all three Keep worker concurrency at one initially on a shared VM. Back up all three
data volumes off-host and verify recovery before collecting real wedding photos. data volumes off-host and verify recovery before collecting real wedding photos.