From ac6910716989a3616fcdf68d635db7d1eb5adb68 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= Date: Mon, 15 Jun 2026 01:00:43 +0200 Subject: [PATCH] chore(compose): whitelist VAPID and APNs env vars so the documented env path reaches the container --- docker-compose.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/docker-compose.yml b/docker-compose.yml index 1c6b5798a..ac73397f7 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -119,6 +119,23 @@ services: SMTP_USER: "${SMTP_USER:-}" SMTP_PASS: "${SMTP_PASS:-}" SMTP_SECURE: "${SMTP_SECURE:-}" + # v1.17.1 — Web Push VAPID keys (optional). The admin Settings panel stores + # these in the DB (the supported path); these env vars are the fallback the + # loader reads when the DB pair is unset. Listed here so the documented env + # path reaches the container under the bundled compose. See + # docs/self-hosting/notifications.md. + VAPID_PUBLIC_KEY: "${VAPID_PUBLIC_KEY:-}" + VAPID_PRIVATE_KEY: "${VAPID_PRIVATE_KEY:-}" + VAPID_SUBJECT: "${VAPID_SUBJECT:-}" + # APNs for a self-hosted native iOS build (optional, env-only — no admin UI + # for the .p8). APNS_KEY_B64 is the escape-free base64 form preferred over + # APNS_KEY/APNS_KEY_FILE; the key must be scoped "Sandbox & Production". + # PWA users need none of this (Web Push covers them). See + # docs/self-hosting/notifications.md. + APNS_KEY_B64: "${APNS_KEY_B64:-}" + APNS_KEY_ID: "${APNS_KEY_ID:-}" + APNS_TEAM_ID: "${APNS_TEAM_ID:-}" + APNS_BUNDLE_ID: "${APNS_BUNDLE_ID:-}" depends_on: db: condition: service_healthy