Control sources for Workspace Sites
Workspace installs a Site as a complete, editable Sitegenerator project. Installation does not create a live release or publish content. Build and publication remain separate, explicit steps.
Choose a source mode
The installation-wide setting cms.site_packages.source_mode supports three modes:
| Mode | Allowed sources |
|---|---|
store_only | Only the central catalog configured in cms.site_packages.store_base_url. |
store_plus_allowlist | The central catalog and HTTPS destinations explicitly listed in cms.site_packages.external_allowed_destinations. |
store_plus_public_https | The central catalog and public HTTPS destinations. Private and local networks remain blocked. |
Use store_only for a hosted environment. Tenants cannot relax this installation-wide policy. Configure trusted catalog Ed25519 keys in cms.site_packages.store_trusted_public_keys; never place private signing keys in Workspace configuration.
The Store URL may contain a fixed service path. The central schukai catalog uses https://www.schukai.com/apps/workspace/sites. Redirects, descriptors, and archives must remain below that path. A URL on the same host but outside the configured path is treated as an external source. The hosted solution keeps store_only locked so a tenant cannot enable arbitrary sources.
Install a Site
In the public catalog, select Install in Workspace and enter the base URL of your Workspace. After signing in, choose the empty target Site under Sites. Its Sites catalog opens with the selected template highlighted. Installation starts only after you review and confirm the plan.
Create an empty Site, start a development session, open the Sites tab, and select a published version. Review the plan before confirming it. Existing files, releases, or missing capabilities block installation. Build and publish your own release only after reviewing the editable source.
The installed copy is independent from the template. Automatic package upgrades are not part of the first version.
Use nucli
nucli --tenant <tenant> sites catalog
nucli --tenant <tenant> sites install plan <site-id> \
--publisher <publisher> --site <site> --version <version>
nucli --tenant <tenant> sites install apply <site-id> \
--publisher <publisher> --site <site> --version <version> \
--plan-digest <digest>
nucli --tenant <tenant> sites install status <site-id>For an external source, use --descriptor-url <https-url> for both plan and apply. The configured source mode must allow the URL. Local ZIP uploads are not supported.