fix(docker): forward OPENROUTER_API_KEY into the self-host container (#152)

This commit is contained in:
Nordalux 2026-07-30 05:32:37 +02:00 committed by GitHub
parent ffb5c9d9e8
commit 4f45a04961
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 4 additions and 0 deletions

View File

@ -19,6 +19,9 @@ services:
- OPENSEO_TELEMETRY_DISABLED=${OPENSEO_TELEMETRY_DISABLED:-} - OPENSEO_TELEMETRY_DISABLED=${OPENSEO_TELEMETRY_DISABLED:-}
- DO_NOT_TRACK=${DO_NOT_TRACK:-} - DO_NOT_TRACK=${DO_NOT_TRACK:-}
- DATAFORSEO_API_KEY=${DATAFORSEO_API_KEY} - DATAFORSEO_API_KEY=${DATAFORSEO_API_KEY}
# Optional: AI features (SAM, onboarding chat). Without this the setup
# gate in the app asks for the key, but nothing here would forward it.
- OPENROUTER_API_KEY=${OPENROUTER_API_KEY:-}
# Optional: Google Search Console. See # Optional: Google Search Console. See
# docs/SELF_HOSTING_GOOGLE_SEARCH_CONSOLE.md # docs/SELF_HOSTING_GOOGLE_SEARCH_CONSOLE.md
- GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID:-} - GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID:-}

View File

@ -33,6 +33,7 @@ Optional env values:
- `ALLOWED_HOST` (single reverse-proxy hostname to allow in Vite preview) - `ALLOWED_HOST` (single reverse-proxy hostname to allow in Vite preview)
- `AUTH_MODE=local_noauth` (already set in compose) - `AUTH_MODE=local_noauth` (already set in compose)
- `OPEN_SEO_IMAGE` (defaults to `ghcr.io/every-app/open-seo:latest`) - `OPEN_SEO_IMAGE` (defaults to `ghcr.io/every-app/open-seo:latest`)
- `OPENROUTER_API_KEY` (required for AI features such as SAM; see [OpenRouter](https://openrouter.ai/settings/keys))
If you are putting Docker behind a reverse proxy or a temporary tunnel, remember that Docker self-hosting runs with app auth disabled. Only expose it behind your own auth-protected reverse proxy, tunnel, or private network, and add the public hostname before restarting: If you are putting Docker behind a reverse proxy or a temporary tunnel, remember that Docker self-hosting runs with app auth disabled. Only expose it behind your own auth-protected reverse proxy, tunnel, or private network, and add the public hostname before restarting: