-
Notifications
You must be signed in to change notification settings - Fork 13
Expand file tree
/
Copy path.env.example
More file actions
112 lines (86 loc) · 4.45 KB
/
Copy path.env.example
File metadata and controls
112 lines (86 loc) · 4.45 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
# Template for local development. Copy this file to `.env` and fill in your
# values. `.env` is gitignored — never commit real secrets.
#
# cp .env.example .env
#
# `.env` is read by docker-compose.yml (directly) and by localdev.sh (which
# passes --env-file .env to Compose).
# ==============================================================================
# Core
# ==============================================================================
# "development" or "production". Keep it "development" for local use —
# the DevAuthProvider and other developer affordances key on this value.
NODE_ENV=development
# ==============================================================================
# Backend + code-runner
# ==============================================================================
# "local" runs user code in a Docker container spawned by the backend.
# "lambda" invokes a deployed Lambda function. Local mode needs Docker
# running; Lambda mode needs AWS_* credentials below + LAMBDA_FUNCTION_NAME.
EXEC_MODE=local
# Backend HTTP port inside its container. Host-side port is mapped 1:1 by
# docker-compose unless you override.
PORT=3000
# Filename prefix for the user's .cpp under /tmp.
USER_CODE_FILE_PREFIX=main
# ==============================================================================
# Database (Postgres — docker-compose spins it up as a sibling service)
# ==============================================================================
# The backend reads DATABASE_URL directly; docker-compose.yml builds it
# from the postgres service name + credentials. Override here only if you
# point local at an external DB.
# DATABASE_URL=postgres://spp:spp@postgres:5432/seepp_main
# ==============================================================================
# Auth — Google OAuth
# ==============================================================================
#
# Create an OAuth 2.0 Web Application client in Google Cloud Console (see
# docs/oauth-setup.md for the step-by-step). Register these redirect URIs:
#
# http://localhost:4000/api/auth/google/callback (local)
# https://frontend.test.spp.seepluspl.us/api/auth/google/callback (test)
# https://seepluspl.us/api/auth/google/callback (prod)
#
# The Client ID is public and safe to share. The Client Secret is NOT —
# if it leaks, reset it in the Google Cloud Console and update here + SSM.
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
# Where OAuth callback URLs are rooted. Override if you run the frontend
# on a non-default host/port (Google must have the resulting URI registered).
OAUTH_CALLBACK_BASE_URL=http://localhost:4000
# ==============================================================================
# Auth — sessions
# ==============================================================================
# Signs session cookies. Generate with:
# openssl rand -hex 32
# Rotating this invalidates every active session (local logs you out).
SESSION_SECRET=
# ==============================================================================
# Auth — dev-only one-click sign-in (optional)
# ==============================================================================
#
# Registers a `dev` auth provider that signs you in as dev@localhost in one
# click — no Google round-trip. Triple-gated server-side (NODE_ENV + this
# flag + absence of AWS_EXECUTION_ENV) so it cannot register in a deployed
# environment. See docs/oauth-setup.md § "Optional: one-click local
# sign-in" for safety details.
DEV_AUTH_ENABLED=
# ==============================================================================
# Admin
# ==============================================================================
#
# Users in ADMIN_EMAILS get users.is_admin = true on sign-in / upsert. Comma
# or semicolon separated; case-insensitive. Leave blank if you don't need
# anyone promoted via env (use the DevAuthProvider path locally instead).
ADMIN_EMAILS=
# When DEV_AUTH_ENABLED is on, the Dev User is auto-promoted to admin so
# you can exercise /admin without jumping through ADMIN_EMAILS. Set to
# "false" to test the non-admin code path locally. Defaults to true.
DEV_AUTH_IS_ADMIN=true
# ==============================================================================
# AWS — only needed for EXEC_MODE=lambda or SDK calls outside Fargate
# ==============================================================================
AWS_REGION=us-west-2
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
LAMBDA_FUNCTION_NAME=spp-trace-executor-dev