service-auth/.env.example at main · pior-labs/service-auth · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
# API
API_PORT=3000
NODE_ENV=production

# Direct connection for local development. Production uses the platform-generated
# connection file through docker-compose.production.yml instead.
DATABASE_URL=postgresql://auth:change-me@postgres:5432/auth

# Host-side path generated by platform-deploy. The production workflow mounts
# this file into the API container as /run/secrets/auth_database_url.
AUTH_DATABASE_URL_FILE=/opt/docker/pior-labs/secrets/service-auth/database-url
DATA_NETWORK=pior_data

# Generate with: openssl rand -base64 32
BETTER_AUTH_SECRET=change-me-generate-a-long-random-secret
BETTER_AUTH_URL=https://auth.szarans.ca
WEB_ORIGIN=https://auth.szarans.ca

# Leave blank so the web SPA uses the origin that served it.
VITE_AUTH_BASE_URL=

# Central Better Auth browser session. Defaults are intentionally generous.
AUTH_SESSION_EXPIRES_IN_SECONDS=3888000
AUTH_SESSION_UPDATE_AGE_SECONDS=86400

# OAuth/OIDC token lifetime tuning.
OAUTH_ACCESS_TOKEN_EXPIRES_IN_SECONDS=3600
OAUTH_ID_TOKEN_EXPIRES_IN_SECONDS=3600
OAUTH_REFRESH_TOKEN_EXPIRES_IN_SECONDS=7776000

# Trusted first-party OAuth clients. Replace before seeding.
# Add one <APP>_CLIENT_SECRET line per registered client (see "Adding an OAuth
# client" in the README).
FINLENS_CLIENT_SECRET=change-me-finlens-client-secret

# Seed exactly two users. Replace emails/names/passwords before first seed.
SEED_USER_1_EMAIL=you@example.com
SEED_USER_1_NAME=Your Name
SEED_USER_1_PASSWORD=change-me-fresh-password-1
SEED_USER_2_EMAIL=fiancee@example.com
SEED_USER_2_NAME=Fiancee Name
SEED_USER_2_PASSWORD=change-me-fresh-password-2