openvibers/openvibe.codes Commits
.env.example: names with a working default are commented (optional), so ovhost validate's from-example check requires only what the service cannot run without
Changes
@@@ -18,7 +18,8 @@ OV_OAUTH_CLIENT_SECRET=# Signs the per-person form token (CSRF). Unset: a random per-process key (forms expire on restart).CODES_FORM_SECRET=--COOKIE_SECURE=true++# optional: defaults to true in production++# COOKIE_SECURE=true# Codes staff (trust tiers, metadata only): staff with staff.site.configure (Network admins), plus these# usr_ subjects (comma list; the break-glass way in).
@@ -18,7 +18,8 @@ OV_OAUTH_CLIENT_SECRET=
@@ -18,7 +18,8 @@ OV_OAUTH_CLIENT_SECRET=
# Signs the per-person form token (CSRF). Unset: a random per-process key (forms expire on restart).
# Signs the per-person form token (CSRF). Unset: a random per-process key (forms expire on restart).
CODES_FORM_SECRET=
CODES_FORM_SECRET=
-COOKIE_SECURE=true
+# optional: defaults to true in production
+# COOKIE_SECURE=true
# Codes staff (trust tiers, metadata only): staff with staff.site.configure (Network admins), plus these
# Codes staff (trust tiers, metadata only): staff with staff.site.configure (Network admins), plus these
# usr_ subjects (comma list; the break-glass way in).
# usr_ subjects (comma list; the break-glass way in).