mirror of
https://github.com/kyantech/Palmr.git
synced 2025-10-23 06:11:58 +00:00
f9f20462ef
- Set sameSite='none' for secure cookies to allow cross-origin requests - Update auth controller and auth-providers controller cookie settings - Document SECURE_SITE env var in .env.example - Fixes file rendering and download issues on Safari with cross-site tracking prevention enabled Co-authored-by: danielalves96 <62755605+danielalves96@users.noreply.github.com>
22 lines
955 B
Plaintext
22 lines
955 B
Plaintext
# FOR FILESYSTEM STORAGE ENV VARS
|
|
ENABLE_S3=false
|
|
DISABLE_FILESYSTEM_ENCRYPTION=true
|
|
# ENCRYPTION_KEY=change-this-key-in-production-min-32-chars # Required only if encryption is enabled (DISABLE_FILESYSTEM_ENCRYPTION=false)
|
|
DATABASE_URL="file:./palmr.db"
|
|
|
|
# SECURITY SETTINGS
|
|
# SECURE_SITE=true # Set to true when using HTTPS in production. This enables secure cookies with SameSite=none, allowing cross-origin requests (required when frontend and backend are on different domains/subdomains)
|
|
|
|
# FOR USE WITH S3 COMPATIBLE STORAGE
|
|
# ENABLE_S3=true
|
|
# S3_ENDPOINT=
|
|
# S3_PORT=
|
|
# S3_USE_SSL=
|
|
# S3_ACCESS_KEY=
|
|
# S3_SECRET_KEY=
|
|
# S3_REGION=
|
|
# S3_BUCKET_NAME=
|
|
# S3_FORCE_PATH_STYLE=
|
|
# S3_REJECT_UNAUTHORIZED=true # Set to false to disable strict SSL certificate validation for self-signed certificates (optional, defaults to true)
|
|
# PRESIGNED_URL_EXPIRATION=3600 # Duration in seconds for presigned URL expiration (optional, defaults to 3600 seconds / 1 hour)
|