tben
8bf6bedec5
The app never terminates TLS: a reverse proxy or tunnel does, and isSecureRequest still reads X-Forwarded-Proto so cookies stay Secure. Removes the cert generator, TLS resolution and HTTP redirect, the local CA download, and the TLS envs, and trims the installer, Dockerfile health check and docs to match. Also softens the composer's loading row.
34 lines
845 B
Bash
34 lines
845 B
Bash
# Development settings. The installer writes its own .env; see README.md.
|
|
|
|
PORT=7227
|
|
|
|
GOOGLE_CLIENT_ID=
|
|
GOOGLE_CLIENT_SECRET=
|
|
|
|
# SMTP host, user and password
|
|
EMAIL_DOMAIN=
|
|
EMAIL_USER=
|
|
EMAIL_PASS=
|
|
# Receives contact form submissions
|
|
CONTACT_EMAIL_RECIPIENT=
|
|
# Outside production, ALL outgoing mail is redirected here (leave empty to skip sending)
|
|
DEV_EMAIL_RECIPIENT=
|
|
|
|
ENCRYPTION_KEY=
|
|
ENCRYPTION_SALT=
|
|
|
|
# The app serves plain HTTP. Put a reverse proxy or tunnel in front for
|
|
# HTTPS (see README).
|
|
|
|
# Web Push: generated into Settings > Environment on first start. Set a
|
|
# fixed pair here only if you want to keep one across installs.
|
|
VAPID_PUBLIC_KEY=
|
|
VAPID_PRIVATE_KEY=
|
|
|
|
# Seed script overrides (bun run seed)
|
|
SEED_SUPER_ADMIN_EMAIL=
|
|
SEED_SUPER_ADMIN_USERNAME=
|
|
SEED_SUPER_ADMIN_FIRST_NAME=
|
|
SEED_SUPER_ADMIN_LAST_NAME=
|
|
SEED_SUPER_ADMIN_PASSWORD=
|