matt/mailship
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
mailship/.env.template

23 lines
811 B
Text
Raw Normal View History

Initial mailship fork from anchor Fork anchor, strip all push notification code (APNs, FCM, WebPush), rename from anchor to mailship, add new database schema for subscriptions + events tables, and add HTTP API for email notification registration and NIP-9a relay push callbacks. - POST /subscription/email — register for email digests - DELETE /subscription/:key — unsubscribe - POST /notify/:id — NIP-9a relay push callback - GET /confirm?token=... — confirm email - GET /unsubscribe?token=... — unsubscribe Co-authored-by: mplorentz
2026-08-18 16:21:22 +00:00
MAILSHIP_SECRET=
Rework email template
2026-08-26 21:57:26 +00:00
MAILSHIP_NAME=Flotilla
Initial mailship fork from anchor Fork anchor, strip all push notification code (APNs, FCM, WebPush), rename from anchor to mailship, add new database schema for subscriptions + events tables, and add HTTP API for email notification registration and NIP-9a relay push callbacks. - POST /subscription/email — register for email digests - DELETE /subscription/:key — unsubscribe - POST /notify/:id — NIP-9a relay push callback - GET /confirm?token=... — confirm email - GET /unsubscribe?token=... — unsubscribe Co-authored-by: mplorentz
2026-08-18 16:21:22 +00:00
MAILSHIP_URL=http://localhost:4738
BASE_URL=http://localhost:4738
Rework email template
2026-08-26 21:57:26 +00:00
# Branding used in email templates. EVENT_VIEWER_URL is the base URL of the
# app you link events into (Flotilla by default, or anything handling the same
# /spaces/<relay>/<group> and /<nevent> URL shapes).
EVENT_VIEWER_URL=https://app.flotilla.social
BRAND_NAME=Flotilla
BRAND_ACCENT=#7161FF
BRAND_LOGO=
Initial mailship fork from anchor Fork anchor, strip all push notification code (APNs, FCM, WebPush), rename from anchor to mailship, add new database schema for subscriptions + events tables, and add HTTP API for email notification registration and NIP-9a relay push callbacks. - POST /subscription/email — register for email digests - DELETE /subscription/:key — unsubscribe - POST /notify/:id — NIP-9a relay push callback - GET /confirm?token=... — confirm email - GET /unsubscribe?token=... — unsubscribe Co-authored-by: mplorentz
2026-08-18 16:21:22 +00:00
INDEXER_RELAYS=purplepag.es,relay.damus.io,relay.nostr.band
DEFAULT_RELAYS=relay.damus.io,nos.lol
SEARCH_RELAYS=relay.nostr.band
fix: scope CORS to browser routes only, require CORS_ORIGIN (fail closed) The server was setting Access-Control-Allow-Origin: * on every route, including the unauthenticated GET /subscription/email which returns the subscriber's email address. Any website could query known pubkeys and harvest emails. Changes: - src/env.ts: require CORS_ORIGIN env var (fail closed, no wildcard) - src/server.ts: scope CORS middleware to browser-facing routes only, skip /notify (server-to-server), add Vary: Origin header, import CORS_ORIGIN from env instead of defaulting to '*' - .env.template: document new CORS_ORIGIN variable - test/cors.test.sh: verify CORS on browser routes, no CORS on server-to-server routes, Vary: Origin presence
2026-09-10 15:29:18 +00:00
# CORS_ORIGIN must be set to the exact origin your browser client runs on
# (e.g. https://app.example.com). There is no wildcard fallback — the server
# will refuse to start without it.
CORS_ORIGIN=
Initial mailship fork from anchor Fork anchor, strip all push notification code (APNs, FCM, WebPush), rename from anchor to mailship, add new database schema for subscriptions + events tables, and add HTTP API for email notification registration and NIP-9a relay push callbacks. - POST /subscription/email — register for email digests - DELETE /subscription/:key — unsubscribe - POST /notify/:id — NIP-9a relay push callback - GET /confirm?token=... — confirm email - GET /unsubscribe?token=... — unsubscribe Co-authored-by: mplorentz
2026-08-18 16:21:22 +00:00
POSTMARK_API_KEY=
POSTMARK_SENDER_ADDRESS=
PORT=4738
Add Dockerfile, docker-compose.yml, .dockerignore Multi-stage Dockerfile: - Stage 1: install deps, build TS, build web UI - Stage 2: minimal production image with sqlite, only prod deps - Exposes port 4738, uses /data volume for SQLite docker-compose.yml for easy local deployment with .env support. .dockerignore to keep the build context lean. README updated with Docker usage. .env.template adds DATA_DIR.
2026-08-18 16:40:42 +00:00
DATA_DIR=./data
Reference in a new issue Copy permalink