Joakim Mörling
ad195fd890
Deploy workflow now writes MAIL_* and APP_PUBLIC_BASE_URL from Actions secrets into the server .env so Resend SMTP works after domain verify. Document Resend-only setup, Forgejo secret names, and prod expose-token off. Co-authored-by: Cursor <cursoragent@cursor.com>
45 lines
1.5 KiB
Text
45 lines
1.5 KiB
Text
# BilHej Environment Variables
|
|
# Copy this file to .env and fill in your keys.
|
|
#
|
|
# cp .env.example .env
|
|
#
|
|
# Docker Compose reads .env from the project root automatically.
|
|
|
|
# ---------- PostgreSQL ----------
|
|
POSTGRES_DB=bilhej
|
|
POSTGRES_USER=bilhej
|
|
POSTGRES_PASSWORD=change_me
|
|
|
|
# ---------- JWT ----------
|
|
# Generate a secure random secret:
|
|
# openssl rand -hex 32
|
|
JWT_SECRET=change_me_to_a_random_64_char_string
|
|
|
|
# ---------- Stripe (Phase 1) ----------
|
|
# Test keys from Stripe Dashboard: https://dashboard.stripe.com/test/apikeys
|
|
STRIPE_SECRET_KEY=sk_test_...
|
|
# Webhook secret from stripe CLI: stripe listen --print-secret
|
|
STRIPE_WEBHOOK_SECRET=whsec_...
|
|
# Price ID from Stripe Dashboard: https://dashboard.stripe.com/test/products
|
|
STRIPE_PRICE_ID=price_...
|
|
|
|
# ---------- Swish (Phase 0) ----------
|
|
SWISH_NUMBER=0701234567
|
|
|
|
# ---------- App URL (password reset links in email) ----------
|
|
APP_PUBLIC_BASE_URL=http://localhost:3000
|
|
|
|
# ---------- SMTP (local Docker uses Mailpit via docker-compose.yml) ----------
|
|
# docker compose up → view mail at http://localhost:8025
|
|
# Leave MAIL_HOST unset in .env to use compose defaults (mailpit).
|
|
# Production (Resend SMTP) — see docs/production-email-checklist.md
|
|
# MAIL_HOST=smtp.resend.com
|
|
# MAIL_PORT=587
|
|
# MAIL_USERNAME=resend
|
|
# MAIL_PASSWORD=re_... # API key; never commit a real value
|
|
# MAIL_FROM=noreply@bilhej.se
|
|
|
|
# ---------- Production admin (prod profile only) ----------
|
|
# Strong password; never use test1234. Dev seeds use test@bilhej.se instead.
|
|
ADMIN_EMAIL=admin@bilhej.se
|
|
ADMIN_PASSWORD=change_me_to_a_strong_password
|