cgalo5758
0b28a9dc29
- Replace gorilla/csrf with net/http CrossOriginProtection - Require valkey-password and add TLS options for session store - End session at /logout and revoke refresh tokens - Re-derive identity and roles from provider every five minutes - Process each Stripe webhook event in its own Temporal workflow - Give each outbox entry its own workflow with Temporal retries - Guard against stale Stripe events with provider timestamps - Derive transport security from base-url scheme
52 lines
2.1 KiB
YAML
52 lines
2.1 KiB
YAML
# WARNING - DO NOT USE THIS IN PRODUCTION
|
|
# This is a local development configuration file
|
|
# It is used to configure the member console application
|
|
# to connect to the local Keycloak server
|
|
# This file is not secure and should not be used in production
|
|
# It is only used for local development purposes only
|
|
|
|
env: development
|
|
port: 8081
|
|
|
|
# Keycloak OIDC settings
|
|
oidc-sp-client-id: "member-console"
|
|
oidc-sp-client-secret: "TEST-ONLY-oidc-client-secret-000"
|
|
oidc-idp-issuer-url: "http://keycloak.localhost:8080/realms/test"
|
|
|
|
# Application settings
|
|
base-url: "http://localhost:8081"
|
|
db-dsn: "postgres://member_console:member_console@localhost:5432/member_console?sslmode=disable"
|
|
valkey-addr: "localhost:6379"
|
|
|
|
# Federated Wiki settings — the farm connection is OPT-IN and lives in
|
|
# test/.env, not here, because the farm URL carries this worktree's allocated
|
|
# FedWiki port. Uncomment the MC_FEDWIKI_* block there and add "fedwiki" to
|
|
# COMPOSE_PROFILES to compose and configure the farm together. Leaving
|
|
# farm-api-url and admin-token unset is valid: FedWiki's farm integration
|
|
# simply stands down, and the app boots without it.
|
|
|
|
# FedWiki sync settings — inert while fedwiki-sync-enabled stays at its false
|
|
# default (Startup returns early), so these only set the test cadence for a
|
|
# stack that has opted in. Prod default is 1h.
|
|
fedwiki-sync-interval: 1m
|
|
fedwiki-sync-trigger-immediately: true
|
|
|
|
# Discourse group-sync settings — same test cadence as the FedWiki sync
|
|
# (prod default is 15m). Inert until the discourse profile's base-url /
|
|
# api-key are configured in .env; the schedule spec is rewritten on boot,
|
|
# so changing this takes effect on app restart.
|
|
discourse-sync-interval: 1m
|
|
discourse-sync-trigger-immediately: true
|
|
|
|
# Temporal settings
|
|
temporal-host: "localhost:7233"
|
|
temporal-namespace: "default"
|
|
temporal-oauth-token-url: "http://keycloak.localhost:8080/realms/test/protocol/openid-connect/token"
|
|
temporal-oauth-client-id: "member-console"
|
|
temporal-oauth-client-secret: "TEST-ONLY-oidc-client-secret-000"
|
|
temporal-oauth-scopes: []
|
|
|
|
# Stripe settings
|
|
stripe-api-key-file: "secrets/stripe-api-key"
|
|
stripe-webhook-secret-file: "secrets/stripe-webhook-secret"
|