Files
Hiren KangadandClaude Opus 4.7 33d3109136 docs: deployment templates for Cloudflare Tunnel, Caddy, Fly.io, Render
examples/compose/cloudflared-paired.yml pairs RefBoard with a cloudflared
sidecar reading a TUNNEL_TOKEN env var — no inbound ports needed, suitable
for home / studio servers.

examples/compose/behind-caddy.yml + Caddyfile fronts RefBoard with Caddy
for automatic Let's Encrypt TLS on a public hostname. Caddy 2's
reverse_proxy transparently upgrades Socket.IO WebSockets.

examples/fly.toml deploys to Fly.io using the GHCR image and a persistent
volume mounted at /app/data. STORAGE_BACKEND=fs so the whole stack is one
machine with one disk.

examples/render.yaml is a Render.com Blueprint targeting the same shape
(GHCR image + attached disk + FS storage).

examples/README.md indexes everything and adds notes for Coolify /
Dokploy / CapRover / Railway, which consume the existing compose file
directly without a dedicated template.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-21 09:51:52 +05:30

54 lines
1.6 KiB
TOML

# Fly.io deployment manifest for RefBoard.
#
# Quick start:
# fly auth signup # if you don't have an account
# fly launch --copy-config --no-deploy # creates the app
# fly secrets set JWT_SECRET=$(openssl rand -base64 64)
# fly volumes create refboard_data --size 10 --region <your-region>
# fly deploy
#
# Notes:
# - This uses the pre-built GHCR image and the FS storage adapter so no MinIO
# is needed. All state (SQLite + media bytes + JWT secret) lives on the
# attached volume.
# - The first user you sign up in the browser becomes admin. After that, turn
# self-registration off in /admin and set ALLOW_SELF_REGISTRATION=false as
# a fly secret to lock it in across rebuilds.
app = "refboard" # change to your unique Fly app name
primary_region = "iad" # change to your closest region (fly platform regions)
[build]
image = "ghcr.io/metalfinger/refboard:latest"
[env]
NODE_ENV = "production"
PORT = "8000"
STORAGE_BACKEND = "fs"
STORAGE_DATA_DIR = "/app/data/storage"
DB_PATH = "/app/data/refboard.db"
MAX_FILE_SIZE_MB = "200"
ALLOW_SELF_REGISTRATION = "false"
# Set CORS_ORIGIN via `fly secrets set CORS_ORIGIN=https://<app>.fly.dev`
[http_service]
internal_port = 8000
force_https = true
auto_stop_machines = false
auto_start_machines = true
min_machines_running = 1
[http_service.concurrency]
type = "requests"
soft_limit = 100
hard_limit = 200
[[mounts]]
source = "refboard_data"
destination = "/app/data"
[[vm]]
cpu_kind = "shared"
cpus = 1
memory_mb = 1024