Files
dickloads/.env.example
Falkan d40b76e8f2 fix: use $env/dynamic/private in hooks.server.ts for CSRF allowlist
- ALLOWED_ORIGINS and NODE_ENV now read via $env/dynamic/private so Vite dev
  server picks them up correctly from .env
- .env.example: document ALLOWED_ORIGINS with dev IP example
- .env: add http://192.168.0.94:5173 to ALLOWED_ORIGINS for local dev
2026-03-20 00:12:40 -04:00

14 lines
545 B
Plaintext

# Copy this to .env and fill in values for local development.
# In production, set these as environment variables / Kubernetes secrets.
# Comma-separated list of additional allowed CORS origins.
# Add your dev machine's IP here if accessing via IP address.
# e.g. ALLOWED_ORIGINS=http://192.168.0.94:5173
ALLOWED_ORIGINS=
# python3 -c "import bcrypt; print(bcrypt.hashpw(b'yourpassword', bcrypt.gensalt(rounds=12)).decode())"
PASSWORD_HASH=
# Random secret for signing session tokens. Generate with:
# openssl rand -hex 32
SESSION_SECRET=