Public Access
lobo
a1763addce
GET /api/version is public. CI passes GIT_SHA and BUILD_TIME as Docker build args; a local build answers dev.
66 lines
1.8 KiB
YAML
66 lines
1.8 KiB
YAML
# ─────────────────────────────────────────────
|
|
# BASE CONFIGURATION (Production Defaults)
|
|
# ─────────────────────────────────────────────
|
|
spring:
|
|
application:
|
|
name: tbp-auth-service
|
|
profiles:
|
|
active: prod # Default profile for local startup
|
|
jpa:
|
|
open-in-view: true
|
|
flyway:
|
|
# Force Flyway to be enabled
|
|
enabled: true
|
|
# Create the schema history table if it does not exist
|
|
baseline-on-migrate: true
|
|
# Explicitly state where to look for scripts
|
|
locations: classpath:db/migration
|
|
threads:
|
|
virtual:
|
|
enabled: true
|
|
mvc:
|
|
apiversion:
|
|
use:
|
|
query-parameter: version
|
|
default: "1.0"
|
|
supported: 1.0, 2,0
|
|
|
|
|
|
# Actuator & Micrometer Settings
|
|
management:
|
|
endpoints:
|
|
web:
|
|
exposure:
|
|
include: health
|
|
endpoint:
|
|
health:
|
|
show-details: never
|
|
|
|
# Security stuff
|
|
security:
|
|
jwt:
|
|
private-key: ${JWT_PRIVATE_KEY}
|
|
public-key: ${JWT_PUBLIC_KEY}
|
|
kid: ${JWT_KID:tbp-auth-1}
|
|
|
|
# Custom properties for CORS
|
|
app:
|
|
build:
|
|
# Filled from the CI run by the Dockerfile.
|
|
commit: ${APP_BUILD_COMMIT:dev}
|
|
time: ${APP_BUILD_TIME:}
|
|
cors:
|
|
# Production default: strictly allow only the frontend domain
|
|
allowed-origins: "https://tbp.andreas-dahm.eu"
|
|
auth:
|
|
cookie-domain: ${APP_AUTH_COOKIE_DOMAIN:}
|
|
cookie-secure: true
|
|
# Auth's own public address: Steam sends the user back here after "Sign in through Steam".
|
|
public-url: ${APP_PUBLIC_URL:http://localhost:8080}
|
|
# Where the user lands after the Steam link.
|
|
frontend-url: ${APP_FRONTEND_URL:http://localhost:5173}
|
|
|
|
# Registration settings
|
|
auth:
|
|
registration:
|
|
invitation-code: ${AUTH_INVITATION_CODE} |