Public Access
lobo
ff26760d40
The localhost default pointed Auth at itself in Docker, so the nightly cleanup failed silently at 04:15. Without a default a missing APP_CORE_INTERNAL_URL stops the start.
76 lines
2.3 KiB
YAML
76 lines
2.3 KiB
YAML
# ─────────────────────────────────────────────
|
|
# BASE CONFIGURATION (Production Defaults)
|
|
# ─────────────────────────────────────────────
|
|
spring:
|
|
application:
|
|
name: tbp-auth-service
|
|
profiles:
|
|
active: prod # Default profile for local startup
|
|
jpa:
|
|
open-in-view: true
|
|
flyway:
|
|
# Force Flyway to be enabled
|
|
enabled: true
|
|
# Create the schema history table if it does not exist
|
|
baseline-on-migrate: true
|
|
# Explicitly state where to look for scripts
|
|
locations: classpath:db/migration
|
|
threads:
|
|
virtual:
|
|
enabled: true
|
|
mvc:
|
|
apiversion:
|
|
use:
|
|
query-parameter: version
|
|
default: "1.0"
|
|
supported: 1.0, 2,0
|
|
|
|
|
|
# Actuator & Micrometer Settings
|
|
management:
|
|
endpoints:
|
|
web:
|
|
exposure:
|
|
include: health
|
|
endpoint:
|
|
health:
|
|
show-details: never
|
|
|
|
# Security stuff
|
|
security:
|
|
jwt:
|
|
private-key: ${JWT_PRIVATE_KEY}
|
|
public-key: ${JWT_PUBLIC_KEY}
|
|
kid: ${JWT_KID:tbp-auth-1}
|
|
|
|
# Custom properties for CORS
|
|
app:
|
|
build:
|
|
# Filled from the CI run by the Dockerfile.
|
|
commit: ${APP_BUILD_COMMIT:dev}
|
|
time: ${APP_BUILD_TIME:}
|
|
cors:
|
|
# Production default: strictly allow only the frontend domain
|
|
allowed-origins: "https://tbp.andreas-dahm.eu"
|
|
auth:
|
|
cookie-domain: ${APP_AUTH_COOKIE_DOMAIN:}
|
|
cookie-secure: true
|
|
# Auth's own public address: Steam sends the user back here after "Sign in through Steam".
|
|
public-url: ${APP_PUBLIC_URL:http://localhost:8080}
|
|
# Where the user lands after the Steam link.
|
|
frontend-url: ${APP_FRONTEND_URL:http://localhost:5173}
|
|
core:
|
|
# Core inside the Docker network, for the account cleanup calls. No default: a wrong URL fails only at the
|
|
# nightly run, a missing one stops the start.
|
|
internal-url: ${APP_CORE_INTERNAL_URL}
|
|
account-cleanup:
|
|
cron: "0 15 4 * * *"
|
|
# How long a deleted account waits before the cleanup removes it for good.
|
|
retention: 30d
|
|
# Log only, delete nothing. See the Deployment README before flipping it.
|
|
dry-run: ${APP_ACCOUNT_CLEANUP_DRY_RUN:true}
|
|
|
|
# Registration settings
|
|
auth:
|
|
registration:
|
|
invitation-code: ${AUTH_INVITATION_CODE} |