Spencer Twaddle
489f376253
Authority, Audience, and MetadataAddress are not secrets so they belong in committed config rather than runtime env vars. MetadataAddress points to the internal Docker URL for JWKS fetch, avoiding nginx hairpinning; it is blanked in Development so the JWT middleware falls back to Authority-based discovery. RequireHttpsMetadata is disabled only when MetadataAddress is set (internal http URL). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
12 lines
288 B
Bash
12 lines
288 B
Bash
# Database
|
|
POSTGRES_HOST=db
|
|
POSTGRES_PORT=5432
|
|
POSTGRES_DB=budget
|
|
POSTGRES_USER=budget
|
|
POSTGRES_PASSWORD=changeme
|
|
|
|
# Client (baked into Vite build)
|
|
VITE_AUTH_AUTHORITY=https://auth.stwaddle.com
|
|
VITE_AUTH_CLIENT_ID=budget-client
|
|
VITE_AUTH_REDIRECT_URI=https://budget.stwaddle.com/callback
|