mirror of
https://github.com/jjbrunton/Sauci.git
synced 2026-10-31 18:19:43 +00:00
jjbrunton
006761d3b0
Replace the Supabase application data plane with the Node/PostgreSQL API, migrate mobile, admin, web, and MCP callers, add controlled cutover tooling, and define hardened Dokploy infrastructure.
33 lines
1.5 KiB
Bash
33 lines
1.5 KiB
Bash
# Copy these names into Dokploy's environment configuration. Do not commit values.
|
|
POSTGRES_DB=sauci
|
|
POSTGRES_USER=sauci
|
|
POSTGRES_PASSWORD=generate-a-long-random-password
|
|
DATABASE_URL=postgresql://sauci:URL_ENCODED_PASSWORD@postgres:5432/sauci
|
|
|
|
# Hosted Supabase Auth only. The service-role key is used solely by the
|
|
# server-side Auth Admin endpoint for account deletion and admin identity
|
|
# enrichment. It belongs on the API only, never the worker, MCP, or a client.
|
|
SUPABASE_AUTH_URL=https://your-project.supabase.co
|
|
SUPABASE_AUTH_AUDIENCE=authenticated
|
|
SUPABASE_AUTH_SERVICE_ROLE_KEY=set-a-server-only-auth-admin-key
|
|
|
|
# Opaque standalone admin API credential. Configure both values together.
|
|
# The UUID must identify an active least-privilege admin_users row. MCP receives
|
|
# the same token as SAUCI_ADMIN_API_TOKEN, not this user ID and no Supabase key.
|
|
ADMIN_API_SERVICE_TOKEN=generate-at-least-32-random-characters
|
|
ADMIN_API_SERVICE_USER_ID=set-to-an-active-migrated-admin-profile-uuid
|
|
REVENUECAT_API_KEY=set-the-secret-revenuecat-api-key
|
|
REVENUECAT_ENTITLEMENT_ID=Sauci Pro
|
|
REVENUECAT_WEBHOOK_SECRET=generate-a-long-random-webhook-secret
|
|
MEDIA_SIGNING_SECRET=generate-at-least-32-random-characters
|
|
MEDIA_PUBLIC_BASE_URL=https://api.example.com
|
|
|
|
# Operations worker. Discord is optional.
|
|
CLASSIFIER_ENABLED=true
|
|
OPENROUTER_API_KEY=set-the-secret-openrouter-key
|
|
CLASSIFIER_MODEL=openai/gpt-4o
|
|
ADMIN_PRIVATE_KEY_JWK=set-the-private-jwk-json-used-for-message-moderation
|
|
DISCORD_WEBHOOK_URL=
|
|
WORKER_POLL_INTERVAL_MS=30000
|
|
WORKER_BATCH_SIZE=25
|