DenozordecandCursor
0f1f89776b
quality / commitlint (push) Skipped
quality / changes (push) Successful in 5s
quality / docker-check (push) Skipped
quality / web (push) Successful in 57s
quality / api (push) Failing after 30s
CD / quality (push) Failing after 1m36s
CD / publish (push) Skipped
- Updated environment configurations to include CDN Manager in the RETURN_TO_ALLOWLIST. - Enhanced target app resolution to recognize CDN-related hosts. - Added CDN Manager to the application switcher and updated relevant documentation. - Included tests to verify the correct mapping of CDN hosts. Co-authored-by: Cursor <[email protected]>
34 lines
1.2 KiB
Plaintext
34 lines
1.2 KiB
Plaintext
# Production .env for deploy/docker-compose.traefik.yml (auth + Traefik).
|
|
# Copy to /opt/auth-portal/.env and fill secrets. Do not commit.
|
|
|
|
# --- Traefik / Let's Encrypt (Cloudflare DNS-01) ---
|
|
CF_DNS_API_TOKEN=
|
|
[email protected]
|
|
AUTH_DOMAIN=auth.shnt.top
|
|
# TRAEFIK_IMAGE_TAG=v3.7
|
|
# TRAEFIK_HTTP_PORT=80
|
|
# TRAEFIK_HTTPS_PORT=443
|
|
# TRAEFIK_LOG_LEVEL=INFO
|
|
|
|
# --- Auth Portal ---
|
|
AUTH_IMAGE_TAG=latest
|
|
JWT_SECRET=
|
|
JWT_TTL_HOURS=1
|
|
REFRESH_TTL_DAYS=14
|
|
ISSUER=https://auth.shnt.top
|
|
# OIDC IdP for Technitium DNS and other external RPs (defaults to ISSUER if empty)
|
|
# OIDC_ISSUER=https://auth.shnt.top
|
|
# Optional PKCS8 RSA PEM; otherwise key is auto-generated into SQLite (/data)
|
|
# OIDC_RSA_PRIVATE_KEY=
|
|
[email protected]
|
|
ADMIN_PASSWORD=
|
|
ADMIN_NAME=Admin
|
|
# Include Technitium origin if used (e.g. https://dns.shnt.top)
|
|
RETURN_TO_ALLOWLIST=.shnt.top,https://vps.shnt.top,https://cfdm.shnt.top,https://bgp.shnt.top,https://fw.shnt.top,https://dns.shnt.top,https://cdn.shnt.top
|
|
LOG_LEVEL=info
|
|
NODE_ENV=production
|
|
# WebAuthn / passkeys (defaults from ISSUER hostname + origin)
|
|
# WEBAUTHN_RP_ID=auth.shnt.top
|
|
# WEBAUTHN_ORIGINS=https://auth.shnt.top
|
|
# WEBAUTHN_RP_NAME=Auth Portal
|