forms/fly.toml at main · DigitaleGesellschaft/forms · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
# Fly config reference: https://fly.io/docs/reference/configuration/

app = "digiges-forms"
primary_region = "fra"
kill_signal = "SIGINT"
kill_timeout = "30s"

[build]
  dockerfile = "Dockerfile"

[env]
  # Formbricks configuration, cf. https://formbricks.com/docs/self-hosting/configuration/environment-variables
  WEBAPP_URL = "https://forms.digitale-gesellschaft.ch"
  NEXTAUTH_URL = "https://forms.digitale-gesellschaft.ch"
  EMAIL_AUTH_DISABLED = "0"
  EMAIL_VERIFICATION_DISABLED = "0"
  INVITE_DISABLED = "0"
  IS_FORMBRICKS_CLOUD = "0"
  PASSWORD_RESET_DISABLED = "0"
  RATE_LIMITING_DISABLED = "0"
  TELEMETRY_DISABLED = "1"
  IMPRINT_ADDRESS = "Digitale Gesellschaft, 4000 Basel, Schweiz"
  IMPRINT_URL = "https://www.digitale-gesellschaft.ch/uber-uns/kontakt/"
  PRIVACY_URL = "https://www.digitale-gesellschaft.ch/uber-uns/rechtliches/"
  # TERMS_URL = "https://www.example.com/terms"
  MAIL_FROM = "forms@digitale-gesellschaft.ch"
  MAIL_FROM_NAME = "Digitale Gesellschaft Schweiz – Forms"
  SMTP_AUTHENTICATED = "1"
  SMTP_HOST = "smtp.datenreisen.ch"
  SMTP_PORT = "587"
  SMTP_REJECT_UNAUTHORIZED_TLS = "1"
  SMTP_SECURE_ENABLED = "0"
  S3_BUCKET_NAME = "digiges-forms"
  S3_ENDPOINT_URL = "https://fly.storage.tigris.dev"
  S3_REGION = "auto"
  # PostgreSQL client configuration
  PGSSLROOTCERT = "/aiven.io_ca.pem"

[[services]]
  protocol = "tcp"
  internal_port = 3000
  auto_stop_machines = "stop"
  auto_start_machines = true
  min_machines_running = 1

  [services.concurrency]
    type = "requests"
    # NOTE: currently ignored since we don't scale (`flyctl scale count 1)
    hard_limit = 1000
    soft_limit = 800

  [[services.ports]]
    port = 80
    handlers = ["http"]
    force_https = true

  [[services.ports]]
    port = 443
    handlers = ["tls", "http"]
    [services.ports.http_options]
      [services.ports.http_options.response]
        [services.ports.http_options.response.headers]
          # doc: https://fly.io/docs/reference/configuration/#services-ports-http_options-response-headers
          # NOTE: setting below CSP exceeds Fly proxy's metadata size limit, causing a connection reset,
          #       cf. https://community.fly.io/t/setting-http-response-headers-on-fly-proxy-breaks-deployment/17248/2
          #       since Formbricks sets a CSP itself and we'd need to grant `unsafe-*` anyways, we don't mind
          # Content-Security-Policy = "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'"
          Strict-Transport-Security = "max-age=63072000; includeSubDomains"
          X-Content-Type-Options = "nosniff"
          X-Frame-Options = "DENY"

  [[services.tcp_checks]]
    grace_period = "30s"
    interval = "15s"
    timeout = "5s"

[[vm]]
  cpu_kind = "shared"
  cpus = 1
  # switch to at least 1024mb before running bigger surveys!
  memory = "512mb"