58 lines
1.6 KiB
Plaintext
58 lines
1.6 KiB
Plaintext
# OIDC Server Production Environment Configuration
|
|
# NEVER commit this file to version control!
|
|
# Copy this to .env on your production server
|
|
|
|
# ===========================================
|
|
# Flask Configuration
|
|
# ===========================================
|
|
|
|
# Environment: production
|
|
FLASK_ENV=production
|
|
|
|
# Secret key for session encryption (REQUIRED!)
|
|
SECRET_KEY=8a84ce2f0be5f7062f5329d93032c95612547928fe97490e2ca63dea12cc8558
|
|
|
|
# ===========================================
|
|
# Database Configuration
|
|
# ===========================================
|
|
|
|
# PostgreSQL (Production)
|
|
# IMPORTANT: Change the password below!
|
|
DATABASE_URL=postgresql://oidc_user:P_QbECpV03H6P9zQNuyu0lyLdOySrlr7Rr9HNpVG3aw@postgres:5432/oidc_db
|
|
POSTGRES_PASSWORD=P_QbECpV03H6P9zQNuyu0lyLdOySrlr7Rr9HNpVG3aw
|
|
|
|
# ===========================================
|
|
# OIDC Server Configuration
|
|
# ===========================================
|
|
|
|
# OIDC Issuer URL (MUST match your public domain!)
|
|
# Change this to your actual domain (e.g., https://auth.yourdomain.com)
|
|
OIDC_ISSUER=http://localhost:5000
|
|
|
|
# Client Credentials
|
|
OIDC_CLIENT_ID=homelab-client
|
|
OIDC_CLIENT_SECRET=nQT_E5iVbsGVOcLi8-yHxIF_sgG7UccHMv2GgvBEQ_g
|
|
|
|
# ===========================================
|
|
# Token Lifetimes (in seconds)
|
|
# ===========================================
|
|
|
|
# Access Token lifetime (1 hour)
|
|
ACCESS_TOKEN_LIFETIME=3600
|
|
|
|
# Authorization Code lifetime (10 minutes)
|
|
AUTHORIZATION_CODE_LIFETIME=600
|
|
|
|
# ID Token lifetime (1 hour)
|
|
ID_TOKEN_LIFETIME=3600
|
|
|
|
# ===========================================
|
|
# Production Settings
|
|
# ===========================================
|
|
|
|
# Number of Gunicorn workers
|
|
WEB_CONCURRENCY=4
|
|
|
|
# Log Level
|
|
LOG_LEVEL=INFO
|