Soul S4: the Bifrost handoff notes, the Bifrost profile and the service contract still named plaintext secret variables; each now names the _FILE credential path. .env.example and the Spotiverse profile taught GC_ACCESS_APP_SPOTIVERSE_SHARED_SECRET_FILE, which nothing reads: spotiverse is not in appSlugs. Both lines are removed rather than adding the slug. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
35 lines
1.6 KiB
Shell
35 lines
1.6 KiB
Shell
# Secrets are files: set NAME_FILE to the absolute path of a file holding only
|
|
# the value. An empty NAME_FILE= is refused, so unused ones stay commented out.
|
|
HOST=127.0.0.1
|
|
PORT=4100
|
|
GC_ACCESS_PRIVATE_COMMAND_HOST=127.0.0.1
|
|
GC_ACCESS_PRIVATE_COMMAND_PORT=4101
|
|
GC_ACCESS_BASE_URL=http://127.0.0.1:4100
|
|
GC_ACCESS_ISSUER=http://127.0.0.1:4100
|
|
GC_ACCESS_STORAGE_BACKEND=memory
|
|
# GC_ACCESS_DATABASE_URL_FILE=/absolute/path/to/credential
|
|
GC_ACCESS_APPLY_SCHEMA_ON_STARTUP=1
|
|
GC_ACCESS_SESSION_TTL_SECONDS=3600
|
|
GC_ACCESS_STATE_TTL_SECONDS=600
|
|
GC_ACCESS_COMPLETION_TTL_SECONDS=300
|
|
GC_ACCESS_SIGNING_PRIVATE_KEY_PATH=
|
|
GC_ACCESS_SIGNING_PRIVATE_KEY_BOOTSTRAP=0
|
|
GC_ACCESS_SIGNING_KEY_ID=
|
|
# GC_ACCESS_TOKEN_ENCRYPTION_KEY_BASE64_FILE=/absolute/path/to/credential
|
|
|
|
GC_ACCESS_PROVIDER_DISCORD_CLIENT_ID=
|
|
# GC_ACCESS_PROVIDER_DISCORD_CLIENT_SECRET_FILE=/absolute/path/to/credential
|
|
GC_ACCESS_PROVIDER_PATREON_CLIENT_ID=
|
|
# GC_ACCESS_PROVIDER_PATREON_CLIENT_SECRET_FILE=/absolute/path/to/credential
|
|
GC_ACCESS_PROVIDER_GITHUB_CLIENT_ID=
|
|
# GC_ACCESS_PROVIDER_GITHUB_CLIENT_SECRET_FILE=/absolute/path/to/credential
|
|
GC_ACCESS_PROVIDER_TWITCH_CLIENT_ID=
|
|
# GC_ACCESS_PROVIDER_TWITCH_CLIENT_SECRET_FILE=/absolute/path/to/credential
|
|
GC_ACCESS_PROVIDER_YOUTUBE_CLIENT_ID=
|
|
# GC_ACCESS_PROVIDER_YOUTUBE_CLIENT_SECRET_FILE=/absolute/path/to/credential
|
|
GC_ACCESS_PROVIDER_SPOTIFY_CLIENT_ID=
|
|
# GC_ACCESS_PROVIDER_SPOTIFY_CLIENT_SECRET_FILE=/absolute/path/to/credential
|
|
|
|
GC_ACCESS_APP_SPOTIVERSE_BACKEND_CALLBACK_URLS=
|
|
# GC_ACCESS_APP_GHOSTLIGHT_SHARED_SECRET_FILE=/absolute/path/to/credential
|
|
GC_ACCESS_APP_GHOSTLIGHT_RUNTIME_IDS=yggdrasil-ghostlight
|