DenozordecandCursor
859ad23006
Таблица audit_log, recordAudit на CRUD, GET /api/v1/audit и dual-write source_app=cfdm. Co-authored-by: Cursor <cursoragent@cursor.com>
39 lines
1.2 KiB
Bash
39 lines
1.2 KiB
Bash
# Cloudflare API
|
|
CLOUDFLARE_API_TOKEN=
|
|
|
|
# Database
|
|
DATABASE_URL=sqlite:data/app.db
|
|
|
|
# Auth — portal SSO (prod) или локальный admin (dev)
|
|
# AUTH_REQUIRED=true → JWT от auth-portal, apps включает cfdm
|
|
AUTH_REQUIRED=false
|
|
AUTH_JWT_SECRET=dev-secret-change-me
|
|
# alias: JWT_SECRET=
|
|
AUTH_ISSUER=https://auth.shnt.top
|
|
AUTH_PORTAL_URL=http://localhost:5175
|
|
# Shared with auth-portal AUDIT_INGEST_SECRET — dual-write audit to portal
|
|
AUTH_AUDIT_INGEST_SECRET=dev-audit-ingest-secret
|
|
JWT_TTL_HOURS=24
|
|
|
|
# Legacy local login (только при AUTH_REQUIRED=false)
|
|
ADMIN_USERNAME=admin
|
|
# Leave empty for dev default password "admin"
|
|
ADMIN_PASSWORD_HASH=
|
|
|
|
# Frontend (Vite) — apps/web/.env.local
|
|
# VITE_AUTH_ENABLED=true
|
|
# VITE_AUTH_PORTAL_URL=http://localhost:5175
|
|
# Публичные URL приложений и integration token: Настройки → Интеграции
|
|
|
|
# ReUI PRO (apps/web/components.json → @reui Authorization)
|
|
# Ключ: https://reui.io/docs/license-setup — класть в .env.local (gitignored)
|
|
REUI_LICENSE_KEY=
|
|
|
|
# Server
|
|
SERVER_PORT=8080
|
|
STATIC_DIR=
|
|
RUST_LOG=info
|
|
|
|
# Certificate scheduler (cron)
|
|
CERT_CHECK_CRON=0 0 */6 * * *
|