summaryrefslogtreecommitdiff
path: root/.env.example
diff options
context:
space:
mode:
Diffstat (limited to '.env.example')
-rw-r--r--.env.example12
1 files changed, 8 insertions, 4 deletions
diff --git a/.env.example b/.env.example
index 70e44e4..430681f 100644
--- a/.env.example
+++ b/.env.example
@@ -10,6 +10,10 @@ TARGET_URL=http://localhost:8081
# For production, generate a new key using: openssl rand -base64 45
SESSION_SECRET=
+# (Required) A 32-byte random key for CSRF protection.
+# Generate with: openssl rand -base64 32
+CSRF_SECRET_KEY=
+
# --- Database ---
# Use ONE of the following options:
@@ -54,10 +58,6 @@ ACCESS_TOKEN_DURATION_MINUTES=15
# Duration for the API JWT refresh token
REFRESH_TOKEN_DURATION_DAYS=7
-# --- PHP Frontend Settings (only needed if FRONTEND_TYPE=php) ---
-# PHP_FPM_SOCKET=/run/php-fpm/php-fpm.sock
-# PHP_DOC_ROOT=
-
# --- Optional: Path Overrides ---
# Uncomment and change these to avoid URL conflicts with your backend application.
# AUTH_PATH_LOGIN=/login
@@ -68,3 +68,7 @@ REFRESH_TOKEN_DURATION_DAYS=7
# AUTH_PATH_ADMIN=/admin
# AUTH_PATH_ADMIN_USERS_API=/api/admin/users
# AUTH_ASSETS_PATH=/assets
+
+# --- PHP Frontend Settings (only needed if FRONTEND_TYPE=php) ---
+# PHP_FPM_SOCKET=/run/php-fpm/php-fpm.sock
+# PHP_DOC_ROOT= \ No newline at end of file