f0c745c50c
Both providers were registered but never usable: all four client env vars are empty in production and no Account row has ever been created. Email and password is the only path that has ever worked. This also simplifies the invite gating that follows. With OAuth there were two redemption paths, an invite token that had to survive the provider round trip in a SameSite=Lax cookie, and an OAuthAccountNotLinked dead end for anyone who signed up with a password and later clicked a provider button. Now there is one path. Account, Session and VerificationToken stay in the schema. They are Auth.js's tables and dropping them would be a destructive migration for no benefit. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
28 lines
920 B
Plaintext
28 lines
920 B
Plaintext
# Database
|
|
DATABASE_URL="postgresql://drinktracker:YOUR_PASSWORD@localhost:5432/drinktracker"
|
|
POSTGRES_USER="drinktracker"
|
|
POSTGRES_PASSWORD="YOUR_PASSWORD"
|
|
POSTGRES_DB="drinktracker"
|
|
|
|
# NextAuth
|
|
NEXTAUTH_URL="http://localhost:3000"
|
|
NEXTAUTH_SECRET="generate-with: openssl rand -base64 32"
|
|
AUTH_TRUST_HOST="true" # Set to true when behind a reverse proxy
|
|
|
|
|
|
# MinIO / S3-compatible storage
|
|
MINIO_ENDPOINT="localhost"
|
|
MINIO_PORT="9000"
|
|
MINIO_ACCESS_KEY="generate-a-strong-access-key"
|
|
MINIO_SECRET_KEY="generate-a-strong-secret-key"
|
|
MINIO_BUCKET="drink-images"
|
|
MINIO_USE_SSL="false"
|
|
|
|
# Encryption (for API key storage)
|
|
ENCRYPTION_KEY="generate-with: openssl rand -hex 32"
|
|
|
|
# AI Gateway (Switchboard)
|
|
# OpenAI-compatible router that picks the best model per request. LAN-only, plain HTTP.
|
|
# Each user adds their own gateway API key in Settings; this is only the endpoint.
|
|
SWITCHBOARD_BASE_URL="http://192.168.2.11:8787/v1"
|