72 lines
2.4 KiB
Plaintext
72 lines
2.4 KiB
Plaintext
# ===========================================
|
|
# Environment Configuration
|
|
# ===========================================
|
|
# Copy this file to .env and fill in the values
|
|
|
|
# -------------------------------------------
|
|
# Keycloak Configuration
|
|
# -------------------------------------------
|
|
# Internal URL for backend-to-Keycloak communication (inside Docker network)
|
|
KEYCLOAK_SERVER_URL=http://keycloak:8080/
|
|
# External URL for browser redirects (accessible from host machine)
|
|
KEYCLOAK_EXTERNAL_URL=http://localhost:8081/
|
|
KEYCLOAK_REALM=your-realm
|
|
KEYCLOAK_CLIENT_ID=your-client-id
|
|
KEYCLOAK_CLIENT_SECRET=your-client-secret
|
|
KEYCLOAK_ADMIN_CLIENT_ID=your-admin-client
|
|
KEYCLOAK_ADMIN_CLIENT_SECRET=your-client-secret
|
|
|
|
# -------------------------------------------
|
|
# Frontend Configuration
|
|
# -------------------------------------------
|
|
# URL where the React frontend is running
|
|
FRONTEND_URL=http://localhost:3000
|
|
|
|
# -------------------------------------------
|
|
# Cookie Configuration
|
|
# -------------------------------------------
|
|
# Name of the authentication cookie
|
|
COOKIE_NAME=access_token
|
|
|
|
# Set to true in production with HTTPS
|
|
COOKIE_SECURE=false
|
|
|
|
# Cookie SameSite policy: "lax", "strict", or "none"
|
|
# Use "lax" for most cases, "none" for cross-site (requires COOKIE_SECURE=true)
|
|
COOKIE_SAMESITE=lax
|
|
|
|
# Cookie domain (leave empty for current domain, or set to .yourdomain.com for subdomains)
|
|
COOKIE_DOMAIN=
|
|
|
|
# Cookie max age in seconds (default: 3600 = 1 hour)
|
|
COOKIE_MAX_AGE=3600
|
|
|
|
# -------------------------------------------
|
|
# Reverse Proxy / TLS Termination
|
|
# -------------------------------------------
|
|
# Enable to trust X-Forwarded-* headers (set true behind ingress/nginx)
|
|
PROXY_HEADERS=false
|
|
# Comma-separated trusted proxy hosts/IPs (use "*" to trust all)
|
|
TRUSTED_PROXY_HOSTS=127.0.0.1,::1
|
|
|
|
# -------------------------------------------
|
|
# Database Configuration (PostgreSQL)
|
|
# -------------------------------------------
|
|
# Database host (your PostgreSQL server address)
|
|
DATABASE_HOST=your-postgres-host
|
|
DATABASE_PORT=5432
|
|
DATABASE_NAME=db-name
|
|
DATABASE_USER=your-username
|
|
DATABASE_PASSWORD=your-password
|
|
|
|
# Set to true to log all SQL queries (useful for debugging)
|
|
DATABASE_ECHO=false
|
|
|
|
# -------------------------------------------
|
|
# Super Admin Configuration
|
|
# -------------------------------------------
|
|
# Credentials for the Super Admin user to be auto-provisioned at startup
|
|
SUPER_ADMIN_USERNAME=masteradmin
|
|
SUPER_ADMIN_EMAIL=masteradmin@example.com
|
|
SUPER_ADMIN_PASSWORD=YourSecurePassword123!
|