codegirl007
afd2476f3c
Address PR review findings: renew session tokens on auth, sniff/re-encode avatars, serialize last-admin checks, bound server timeouts, rune-safe truncation, and TEST_DATABASE_URL-only integration tests.
20 lines
990 B
Bash
20 lines
990 B
Bash
# Local listen address (ignored when PORT is set, e.g. on App Platform)
|
|
LISTEN=:8080
|
|
# Required: PlanetScale Postgres URI (port 5432 so the app can create tables on boot).
|
|
# Switch to 6432 (PgBouncer) later if you need pooling.
|
|
DATABASE_URL=postgresql://user:password@host.example.com:5432/postgres?sslmode=verify-full
|
|
# Required for integration tests (do not point at the runtime DATABASE_URL).
|
|
# TEST_DATABASE_URL=postgresql://user:password@host.example.com:5432/plumber_test?sslmode=verify-full
|
|
# Optional: first matching registrant becomes admin only if no admin exists yet.
|
|
# Later promote/demote via /admin/users (admins only).
|
|
ADMIN_USERNAME=yourusername
|
|
# Set to 1 when serving over HTTPS
|
|
SECURE_COOKIE=0
|
|
# DigitalOcean Spaces (profile avatars). Leave unset to disable uploads.
|
|
# SPACES_KEY=
|
|
# SPACES_SECRET=
|
|
# SPACES_REGION=nyc3
|
|
# SPACES_BUCKET=your-bucket
|
|
# SPACES_ENDPOINT=https://nyc3.digitaloceanspaces.com
|
|
# SPACES_CDN_BASE=https://your-bucket.nyc3.cdn.digitaloceanspaces.com
|