- Create scripts/install.sh that auto-generates Ed25519 signing key, JWT secret, Postgres and MinIO passwords from .env.example placeholders - Add startup validation in server to reject placeholder secrets - Add 401 interceptor in console API client to clear stale JWT tokens - Update README Quick Start to use ./scripts/install.sh - Update .env.example with GENERATE_ME placeholders for all secrets Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
32 lines
663 B
Bash
32 lines
663 B
Bash
# PostgreSQL
|
|
POSTGRES_USER=elydora
|
|
POSTGRES_PASSWORD=GENERATE_ME
|
|
POSTGRES_DB=elydora
|
|
DATABASE_URL=postgresql://elydora:GENERATE_ME@postgres:5432/elydora
|
|
|
|
# Redis
|
|
REDIS_URL=redis://redis:6379
|
|
|
|
# MinIO
|
|
MINIO_ROOT_USER=elydora
|
|
MINIO_ROOT_PASSWORD=GENERATE_ME
|
|
MINIO_ENDPOINT=http://minio:9000
|
|
MINIO_ACCESS_KEY=elydora
|
|
MINIO_SECRET_KEY=GENERATE_ME
|
|
MINIO_BUCKET=elydora-evidence
|
|
|
|
# Elydora API
|
|
PORT=8787
|
|
ENVIRONMENT=production
|
|
API_VERSION=v1
|
|
PROTOCOL_VERSION=1.0
|
|
JWT_SECRET=GENERATE_ME
|
|
ELYDORA_SIGNING_KEY=GENERATE_ME
|
|
ALLOWED_ORIGINS=http://localhost:3000
|
|
|
|
# TSA (optional)
|
|
TSA_URL=http://timestamp.sectigo.com
|
|
|
|
# Console
|
|
NEXT_PUBLIC_API_BASE_URL=http://localhost:8787
|