Configuration

Environment Variables

All configuration is done through environment variables, loaded from .env in development.

Django Settings

| Variable | Default | Description |

|---|

| SECRET_KEY | -- | Django secret key (required) |

| DEBUG | False | Enable debug mode |

| ALLOWED_HOSTS | localhost | Comma-separated list of allowed hosts |

| TIME_ZONE | UTC | Server timezone |

Database

| Variable | Default | Description |

|---|

| POSTGRES_DB | fossilrepo | Database name |

| POSTGRES_USER | fossilrepo | Database user |

| POSTGRES_PASSWORD | -- | Database password (required) |

| POSTGRES_HOST | postgres | Database host |

| POSTGRES_PORT | 5432 | Database port |

Redis & Celery

| Variable | Default | Description |

|---|

| REDIS_URL | redis://redis:6379/0 | Redis connection URL |

| CELERY_BROKER_URL | $REDIS_URL | Celery broker (defaults to Redis URL) |

Fossil

| Variable | Default | Description |

|---|

| FOSSIL_REPO_DIR | /data/repos | Directory where .fossil files are stored |

| FOSSIL_BASE_URL | -- | Base URL for Fossil web UI (e.g., https://code.example.com) |

| FOSSIL_BINARY | fossil | Path to the Fossil binary |

Caddy (Production)

| Variable | Default | Description |

|---|

| CADDY_DOMAIN | -- | Your domain (e.g., example.com) |

| CADDY_EMAIL | -- | Email for Let's Encrypt certificates |

Litestream (Backups)

| Variable | Default | Description |

|---|

| LITESTREAM_ACCESS_KEY_ID | -- | S3 access key |

| LITESTREAM_SECRET_ACCESS_KEY | -- | S3 secret key |

| LITESTREAM_BUCKET | -- | S3 bucket name |

| LITESTREAM_ENDPOINT | -- | S3 endpoint (for MinIO/B2) |

| LITESTREAM_REGION | us-east-1 | S3 region |

Sync Bridge

| Variable | Default | Description |

|---|

| GITHUB_TOKEN | -- | GitHub personal access token (for mirroring) |

| GITLAB_TOKEN | -- | GitLab personal access token (for mirroring) |

Caddy Configuration

The Caddyfile controls SSL termination and subdomain routing. Each Fossil repo gets its own subdomain:

{$CADDY_DOMAIN} {
reverse_proxy django:8000
}
*.{$CADDY_DOMAIN} {
reverse_proxy fossil:8080
}

Caddy automatically provisions Let's Encrypt certificates for all subdomains.

Litestream Configuration

Litestream continuously replicates every .fossil SQLite file to S3:

dbs:
- path: /data/repos/*.fossil
replicas:
- type: s3
bucket: ${LITESTREAM_BUCKET}
endpoint: ${LITESTREAM_ENDPOINT}
region: ${LITESTREAM_REGION}

Point-in-time recovery

Litestream replicates WAL frames continuously. You can restore any .fossil file to any point in time, not just the latest snapshot.