-
Notifications
You must be signed in to change notification settings - Fork 68
Expand file tree
/
Copy path.env.example
More file actions
75 lines (63 loc) · 2.87 KB
/
Copy path.env.example
File metadata and controls
75 lines (63 loc) · 2.87 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
# phase.dev - Keep secrets.
#
# /$$
# | $$
# /$$$$$$ | $$$$$$$ /$$$$$$ /$$$$$$$ /$$$$$$
# /$$__ $$| $$__ $$ |____ $$ /$$_____/ /$$__ $$
# | $$ \ $$| $$ \ $$ /$$$$$$$| $$$$$$ | $$$$$$$$
# | $$ | $$| $$ | $$ /$$__ $$ \____ $$| $$_____/
# | $$$$$$$/| $$ | $$| $$$$$$$ /$$$$$$$/| $$$$$$$
# | $$____/ |__/ |__/ \_______/|_______/ \_______/
# | $$
# |__/
#
# For the complete list of secrets and deployment configuration options, see:
# https://docs.phase.dev/self-hosting/configuration/envars
# Warning: For production deployments, use a more secure method than a .env file to store secrets.
# Replace with your domain or host.
# Use the domain or IP address where users will access Phase.
HOST=localhost
HTTP_PROTOCOL=https://
# Whitelist email domains that users are allowed to sign in with, as a comma-separated list.
# Leave commented to allow all email domains.
#USER_EMAIL_DOMAIN_WHITELIST=mydomain.com,subdomain.mydomain.com
# WARNING: Replace these with cryptographically strong random values. You can use `openssl rand -hex 32` to generate them.
NEXTAUTH_SECRET=82031b3760ac58352bb2d48fd9f32e9f72a0614343b669038139f18652ed1447
SECRET_KEY=92d44efc4f9a4c0556cc67d2d033d3217829c263d5ab7d1954cf4b5bfd533e58
SERVER_SECRET=9e760539415af07b22249b5878593bd4deb9b8961c7dd0570117549f2c4f32a2
# OAuth providers to enable on the sign-in page (optional).
# Leave empty for password-only signup and login.
# Example: SSO_PROVIDERS=google,github,gitlab
SSO_PROVIDERS=
# Enable password authentication (opt-in). Default behaviour is SSO-only:
# all password endpoints (register, login, change-password, password-based
# recovery) are refused, and the login page hides the password UI. Set
# this to true to allow password signup and login alongside SSO. SSO is
# unaffected either way; if you set this to true with no SSO_PROVIDERS
# configured, password becomes the only sign-in method.
ENABLE_PASSWORD_AUTH=true
# OAuth provider credentials. Add credentials for each provider you enable in SSO_PROVIDERS.
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
GITLAB_CLIENT_ID=
GITLAB_CLIENT_SECRET=
# Integrations
# GitHub secret sync integration OAuth credentials.
GITHUB_INTEGRATION_CLIENT_ID=
GITHUB_INTEGRATION_CLIENT_SECRET=
# Database credentials. Change these values as needed, except DATABASE_HOST.
# Do not change DATABASE_HOST for the default Docker Compose setup.
DATABASE_HOST=postgres
DATABASE_PORT=5432
DATABASE_NAME=postgres-db-name
DATABASE_USER=postgres-user
DATABASE_PASSWORD=a765b221799be364c53c8a32acccf5dd90d5fc832607bdd14fccaaaa0062adfd
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_PASSWORD=
# Number of worker processes for Log Stream deliveries (optional, default 2).
# Log shipping is network-bound and serialized per stream, so useful
# concurrency roughly equals your number of active Log Streams.
#LOG_STREAM_WORKERS=2