mirror of
https://github.com/warmbly/warmbly.git
synced 2026-08-18 16:01:18 +00:00
Matthew Meszaros
87f9bf58b0
Add passkey enrollment and login wiring, including a Safari-safe explicit login path that prefetches the WebAuthn challenge before the click and calls the credential ceremony immediately from the user gesture.
54 lines
1.4 KiB
Plaintext
54 lines
1.4 KiB
Plaintext
# DATABASES / SERVICES
|
|
PRIMARY_DB="postgresql://username:password@localhost:5433/database"
|
|
REDIS="redis://arbitrary_usrname:password@ipaddress:6379/0"
|
|
KAFKA="amqp://username:password@ip:port/vhost"
|
|
GEO_DB_PATH="./database.mmdb"
|
|
|
|
# NoSQL Cassandra Database (Datastax Astra)
|
|
ASTRA_DB_ID=""
|
|
ASTRA_DB_REGION=""
|
|
ASTRA_KEYSPACE_NAME=""
|
|
ASTRA_APPLICATION_TOKEN=""
|
|
|
|
# Authentication
|
|
GOOGLE_CLIENT_ID=""
|
|
GOOGLE_CLIENT_SECRET=""
|
|
GOOGLE_REDIRECT_URI=""
|
|
|
|
APPLE_APP_ID=""
|
|
APPLE_TEAM_ID=""
|
|
APPLE_KEY_ID=""
|
|
APPLE_KEY_SECRET=""
|
|
|
|
# Config
|
|
NOTIFY_NAME="Warmbly Notifications"
|
|
NOTIFY_ADDRESS="noreply@warmbly.com"
|
|
TRACKING_DOMAIN="track.example.com"
|
|
WEBSOCKET_URL="ws://localhost:4000"
|
|
|
|
# Api
|
|
PORT=8080
|
|
GIN_MODE=release
|
|
OPEN_API=true
|
|
|
|
# Logs
|
|
SENTRY_DSN=""
|
|
|
|
# SECRETS
|
|
AUTH_SECRET="example123"
|
|
TURNSTILE_SECRET=""
|
|
|
|
# Passkeys (WebAuthn). Optional — derived from APP_URL / CORS_ALLOW_ORIGINS
|
|
# when unset (and localhost for local dev). Override for self-hosting:
|
|
# WEBAUTHN_RP_ID is the bare host (no scheme/port) passkeys bind to.
|
|
# WEBAUTHN_RP_ORIGINS is a CSV of full origins allowed to run ceremonies.
|
|
# Changing the RP ID invalidates every enrolled passkey — keep it stable.
|
|
# WEBAUTHN_RP_ID="app.warmbly.com"
|
|
# WEBAUTHN_RP_ORIGINS="https://app.warmbly.com"
|
|
# WEBAUTHN_RP_DISPLAY_NAME="Warmbly"
|
|
|
|
# Amazon AWS
|
|
AWS_ACCESS_KEY_ID=AKIAxxxxxxxxxxxx
|
|
AWS_SECRET_ACCESS_KEY=xxxxxxxxxxxxxxxxxxxxxxxxx
|
|
AWS_DEFAULT_REGION=eu-north-1
|