Files
corrosion-admin-panel/.env.example
Vantz Stockwell 5668675b6a feat: Implement full auth pipeline — login, register, JWT, bootstrap
Backend auth flow is now functional:
- services/auth.rs: Argon2id password hashing, JWT access/refresh tokens
- services/encryption.rs: AES-256-GCM encrypt/decrypt, hex token generation
- api/auth.rs: Login, register, refresh, logout, /me endpoints
- middleware/auth.rs: JWT Bearer token extractor (FromRequestParts)
- db/users.rs + licenses.rs: Full CRUD with runtime queries (no compile-time DB)
- main.rs: Bootstrap admin user on first run via ADMIN_EMAIL/ADMIN_PASSWORD env vars
- NATS connection now optional for dev (graceful fallback)
- Added hex and http crates to Cargo.toml

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-14 21:49:37 -05:00

42 lines
985 B
Plaintext

# Corrosion Platform — Environment Variables
# Copy to .env and fill in values
# Database
DATABASE_URL=postgres://corrosion:corrosion_dev@localhost:5432/corrosion
DATABASE_MAX_CONNECTIONS=20
DB_PASSWORD=corrosion_dev
# NATS
NATS_URL=nats://localhost:4222
# Auth
JWT_SECRET=change-me-to-a-random-64-char-string
JWT_ACCESS_EXPIRY_SECONDS=900
JWT_REFRESH_EXPIRY_SECONDS=604800
ENCRYPTION_KEY=change-me-to-a-random-32-byte-hex-key
# Bootstrap Admin (creates admin user on first run if no users exist)
ADMIN_EMAIL=admin@corrosionmgmt.com
ADMIN_PASSWORD=corrosion-dev-2026
ADMIN_USERNAME=Commander
ADMIN_LICENSE_KEY=CORROSION-DEV-0001-ADMIN
# Cloudflare (subdomain provisioning)
CLOUDFLARE_API_TOKEN=
CLOUDFLARE_ZONE_ID=
BASE_DOMAIN=corrosionmgmt.com
# Steam API (force wipe detection)
STEAM_API_KEY=
# Email (SMTP)
SMTP_HOST=smtp.example.com
SMTP_PORT=587
SMTP_USERNAME=
SMTP_PASSWORD=
SMTP_FROM=noreply@corrosionmgmt.com
# Server
API_PORT=3000
FRONTEND_URL=http://localhost:5174