pb-deploy

原文涵盖的主题

• PocketBase Production Deployment
• Single Binary Deployment
• systemd Service
• File descriptor limit
• Go memory limit
• Docker
• Dockerfile
• docker-compose.yml

PocketBase is a single binary. No runtime dependencies. Data stored in pbdata/ (SQLite DB, uploaded files, logs). For high-traffic deployments, increase the limit: Also set system-wide in /etc/security/limits.conf: For constrained environments: That's it. Caddy handles TLS certificates automatically via Let's Encrypt. Critical for realtime: proxybuffering off and proxyreadtimeout must be set for SSE subscriptions to work. Configure in Dashboard > Settings > Mail settings, or via hooks: Always enable MFA for superuser accounts in production: Dashboard > Superusers > Auth options > MFA > Enable Encrypt sensitive settings (SMTP passwords, S3 keys) at rest: Set PBENCRYPTIONKEY environment variable to a 32+ character random string. Once set, settings are encrypted in the DB. Do not lose this key — you won't be able to decrypt settings without it. Built-in rate limiter (enabled by default). Configure in Dashboard > Settings > Rate limits, or: Access the dashboard only via SSH tunnel: For file uploads, offload to S3-compatible storage: Dashboard > Settings > Files storage > S3 Compatible providers: AWS S3, Backblaze B2, Cloudflare R2, MinIO, DigitalOcean Spaces, Wasabi. Use the built-in b

这里只展示节选，请以完整原文和当前要求为准。