mskanban/.env.development.example at main · MSK-Scripts/mskanban · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
# =========================================================
# MSKanban — .env.development.example
# Defaults match docker/docker-compose.dev.yml exactly.
# Copy to `.env.local` and adjust if needed.
#
# WARNING: These credentials are intentionally weak so that
# nobody confuses them with production secrets.
# =========================================================

# ---------- App ------------------------------------------------------------
NEXT_PUBLIC_APP_URL="http://localhost:3000"
NODE_ENV="development"
PORT="3000"

# ---------- Database (Docker container `mskanban-dev-mariadb`) -------------
# Host port is 3307 to avoid collision with any system-wide MariaDB on 3306.
DATABASE_URL="mysql://mskanban:devpass_only_change_in_prod@127.0.0.1:3307/mskanban"

# ---------- Redis (Docker container `mskanban-dev-redis`) ------------------
REDIS_URL="redis://127.0.0.1:6379"

# ---------- Auth.js v5 -----------------------------------------------------
# Generate a real secret even for dev:
#   openssl rand -base64 32
AUTH_SECRET="generate-with-openssl-rand-base64-32-and-replace-me"
AUTH_TRUST_HOST="true"

# ---------- Server-side encryption key -------------------------------------
SERVER_ENCRYPTION_KEY="generate-with-openssl-rand-base64-32-and-replace-me"

# ---------- WebAuthn / Passkeys --------------------------------------------
WEBAUTHN_RP_ID="localhost"
WEBAUTHN_RP_NAME="MSKanban Dev"
WEBAUTHN_RP_ORIGIN="http://localhost:3000"

# ---------- Mail -----------------------------------------------------------
# Security emails (account-lock / login-notification, ADR 0018). Empty
# SMTP_HOST = mailer disabled (fail-open no-op). Dev tip: run a local
# Mailhog/Mailpit container on :1025 and set SMTP_HOST=127.0.0.1 to see them.
SMTP_HOST=""
SMTP_PORT="1025"
SMTP_USER=""
SMTP_PASSWORD=""
SMTP_FROM="no-reply@mskanban.local"
SMTP_SECURE="false"

# ---------- Attachments / Storage ------------------------------------------
STORAGE_DRIVER="local"
STORAGE_LOCAL_PATH="./.storage"
ATTACHMENT_MAX_BYTES="26214400"

# ---------- Rate limiting --------------------------------------------------
RATE_LIMIT_AUTH_PER_MIN="100"
RATE_LIMIT_API_PER_MIN="600"

# ---------- WebSocket gateway ----------------------------------------------
WS_PORT="3001"

# ---------- Telemetry ------------------------------------------------------
NEXT_TELEMETRY_DISABLED="1"

# ---------- Logging --------------------------------------------------------
LOG_LEVEL="debug"

# ---------- Feature flags --------------------------------------------------
FEATURE_PUBLIC_REGISTRATION="true"
FEATURE_DEMO_MODE="false"