ZacharyZhang-NYandClaude Opus 4.6
27a8f0667c
Console: - Rewrite auth from JWT decoding to Better Auth useSession() - Add auth-client.ts with createAuthClient - Remove elydora_token localStorage, dead auth API functions - Fix login/register pages to use signIn.email/signUp.email Server: - Upgrade better-auth ^1.2.0 → ^1.5.5 - CORS: enforce allowlist on all environments - Sync auth service and middleware with backend SDKs: - Deprecate login/register in Node, Python, Go SDKs - Update READMEs to show direct token initialization Config: - Sanitize .env with dev-only placeholder values - Update helm chart and install scripts Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
103 lines
1.6 KiB
YAML
103 lines
1.6 KiB
YAML
global:
|
|
imageRegistry: ""
|
|
|
|
image:
|
|
api:
|
|
repository: elydora/api
|
|
tag: latest
|
|
pullPolicy: IfNotPresent
|
|
console:
|
|
repository: elydora/console
|
|
tag: latest
|
|
pullPolicy: IfNotPresent
|
|
|
|
namespace: elydora
|
|
|
|
replicaCount:
|
|
api: 2
|
|
worker: 2
|
|
scheduler: 1
|
|
console: 2
|
|
|
|
resources:
|
|
api:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
worker:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
scheduler:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
console:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
|
|
# PostgreSQL
|
|
postgres:
|
|
host: postgres
|
|
port: 5432
|
|
user: elydora
|
|
password: elydora-secret-change-me
|
|
database: elydora
|
|
storage: 10Gi
|
|
|
|
# Redis
|
|
redis:
|
|
host: redis
|
|
port: 6379
|
|
storage: 2Gi
|
|
|
|
# MinIO
|
|
minio:
|
|
host: minio
|
|
port: 9000
|
|
rootUser: elydora
|
|
rootPassword: elydora-minio-secret-change-me
|
|
bucket: elydora-evidence
|
|
storage: 50Gi
|
|
|
|
# Elydora API config
|
|
api:
|
|
port: 8787
|
|
environment: production
|
|
betterAuthSecret: change-me-to-a-random-string-at-least-32-chars
|
|
signingKey: change-me-base64url-ed25519-private-key
|
|
allowedOrigins: "https://console.example.com"
|
|
tsaUrl: "http://timestamp.sectigo.com"
|
|
|
|
# Console
|
|
console:
|
|
port: 3000
|
|
apiBaseUrl: "https://api.example.com"
|
|
|
|
# Ingress
|
|
ingress:
|
|
enabled: true
|
|
className: nginx
|
|
annotations: {}
|
|
api:
|
|
host: api.example.com
|
|
tls: true
|
|
tlsSecret: elydora-api-tls
|
|
console:
|
|
host: console.example.com
|
|
tls: true
|
|
tlsSecret: elydora-console-tls
|