From ff26760d40239553ec61266c63e0378b5b73f4da Mon Sep 17 00:00:00 2001
From: lobo <andreas.dahm@gmail.com>
Date: Mon, 28 Sep 2026 07:46:21 +0200
Subject: [PATCH] fix(account): require the Core internal URL

The localhost default pointed Auth at itself in Docker, so the nightly cleanup failed silently at 04:15. Without a default a missing APP_CORE_INTERNAL_URL stops the start.
---
 readme.md                          | 1 +
 src/main/resources/application.yml | 5 +++--
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/readme.md b/readme.md
index a5964c1..4cf38ed 100644
--- a/readme.md
+++ b/readme.md
@@ -210,6 +210,7 @@ Configuration comes from environment variables:
 | `DB_PASSWORD` | Local PostgreSQL password |
 | `APP_PUBLIC_URL` | Auth's public address, the Steam OpenID realm (default `http://localhost:8080`) |
 | `APP_FRONTEND_URL` | Where the Steam link ends (default `http://localhost:5173`) |
+| `APP_CORE_INTERNAL_URL` | Core for the nightly account cleanup, required (local `http://localhost:8090`, Docker `http://tbp-core-service:8090`) |
 
 Generate a keypair:
 
diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml
index dcf0d6e..c0f9a1d 100644
--- a/src/main/resources/application.yml
+++ b/src/main/resources/application.yml
@@ -60,8 +60,9 @@ app:
   # Where the user lands after the Steam link.
   frontend-url: ${APP_FRONTEND_URL:http://localhost:5173}
   core:
-    # Core inside the Docker network, for the account cleanup calls.
-    internal-url: ${APP_CORE_INTERNAL_URL:http://localhost:8090}
+    # Core inside the Docker network, for the account cleanup calls. No default: a wrong URL fails only at the
+    # nightly run, a missing one stops the start.
+    internal-url: ${APP_CORE_INTERNAL_URL}
   account-cleanup:
     cron: "0 15 4 * * *"
     # How long a deleted account waits before the cleanup removes it for good.