From d062e70ba21e5a4ec5b84a356c8905778535ac9c Mon Sep 17 00:00:00 2001 From: haturatu Date: Mon, 13 Oct 2025 02:58:46 +0900 Subject: add(demo): startup shell --- .env.example | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) (limited to '.env.example') diff --git a/.env.example b/.env.example index 70e44e4..430681f 100644 --- a/.env.example +++ b/.env.example @@ -10,6 +10,10 @@ TARGET_URL=http://localhost:8081 # For production, generate a new key using: openssl rand -base64 45 SESSION_SECRET= +# (Required) A 32-byte random key for CSRF protection. +# Generate with: openssl rand -base64 32 +CSRF_SECRET_KEY= + # --- Database --- # Use ONE of the following options: @@ -54,10 +58,6 @@ ACCESS_TOKEN_DURATION_MINUTES=15 # Duration for the API JWT refresh token REFRESH_TOKEN_DURATION_DAYS=7 -# --- PHP Frontend Settings (only needed if FRONTEND_TYPE=php) --- -# PHP_FPM_SOCKET=/run/php-fpm/php-fpm.sock -# PHP_DOC_ROOT= - # --- Optional: Path Overrides --- # Uncomment and change these to avoid URL conflicts with your backend application. # AUTH_PATH_LOGIN=/login @@ -68,3 +68,7 @@ REFRESH_TOKEN_DURATION_DAYS=7 # AUTH_PATH_ADMIN=/admin # AUTH_PATH_ADMIN_USERS_API=/api/admin/users # AUTH_ASSETS_PATH=/assets + +# --- PHP Frontend Settings (only needed if FRONTEND_TYPE=php) --- +# PHP_FPM_SOCKET=/run/php-fpm/php-fpm.sock +# PHP_DOC_ROOT= \ No newline at end of file -- cgit v1.2.3