84667170f1
Logto returns opaque access tokens when no resource is specified. Added API resource creation to bootstrap, included resource indicator in /api/config, and SPA now passes resource parameter in auth request. Also fixed issuer-uri to match Logto's public endpoint. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
33 lines
865 B
Plaintext
33 lines
865 B
Plaintext
# Cameleer SaaS Environment Variables
|
|
# Copy to .env and fill in values
|
|
|
|
# Application version
|
|
VERSION=latest
|
|
|
|
# PostgreSQL
|
|
POSTGRES_USER=cameleer
|
|
POSTGRES_PASSWORD=change_me_in_production
|
|
POSTGRES_DB=cameleer_saas
|
|
|
|
# Logto Identity Provider
|
|
LOGTO_ENDPOINT=http://logto:3001
|
|
LOGTO_PUBLIC_ENDPOINT=http://localhost:3001
|
|
LOGTO_ISSUER_URI=http://localhost:3001/oidc
|
|
LOGTO_JWK_SET_URI=http://logto:3001/oidc/jwks
|
|
LOGTO_DB_PASSWORD=change_me_in_production
|
|
LOGTO_M2M_CLIENT_ID=
|
|
LOGTO_M2M_CLIENT_SECRET=
|
|
LOGTO_SPA_CLIENT_ID=
|
|
|
|
# Ed25519 Keys (mount PEM files)
|
|
CAMELEER_JWT_PRIVATE_KEY_PATH=/etc/cameleer/keys/ed25519.key
|
|
CAMELEER_JWT_PUBLIC_KEY_PATH=/etc/cameleer/keys/ed25519.pub
|
|
|
|
# Domain (for Traefik TLS)
|
|
DOMAIN=localhost
|
|
|
|
CAMELEER_AUTH_TOKEN=change_me_bootstrap_token
|
|
CAMELEER_CONTAINER_MEMORY_LIMIT=512m
|
|
CAMELEER_CONTAINER_CPU_SHARES=512
|
|
CAMELEER_TENANT_SLUG=default
|