From 8889eb10ce481909bc19d38002188cf774a133d8 Mon Sep 17 00:00:00 2001
From: Tim Bendt <timbendt@granular.ag>
Date: Sun, 30 Nov 2025 20:23:40 -0500
Subject: [PATCH] ready for prod?

---
 .env.sample => .env       |  6 ++---
 .gitignore                |  1 -
 bewcloud.config.sample.ts | 46 ---------------------------------------
 docker-compose.yml        |  2 +-
 4 files changed, 4 insertions(+), 51 deletions(-)
 rename .env.sample => .env (87%)
 delete mode 100644 bewcloud.config.sample.ts

diff --git a/.env.sample b/.env
similarity index 87%
rename from .env.sample
rename to .env
index 0a501ae..98d039a 100644
--- a/.env.sample
+++ b/.env
@@ -2,13 +2,13 @@ PORT=8000
 
 POSTGRESQL_HOST="postgresql" # docker container name or external hostname/IP
 POSTGRESQL_USER="postgres"
-POSTGRESQL_PASSWORD="fake"
+POSTGRESQL_PASSWORD="df7c6935a6ff"
 POSTGRESQL_DBNAME="bewcloud"
 POSTGRESQL_PORT=5432
 POSTGRESQL_CAFILE=""
 
-JWT_SECRET="fake"
-PASSWORD_SALT="fake"
+JWT_SECRET="zfl655gcdax8hg9dp5fb47qk2"
+PASSWORD_SALT="5a9bbb7d546"
 
 MFA_KEY="fake" # optional, if you want to enable multi-factor authentication
 MFA_SALT="fake" # optional, if you want to enable multi-factor authentication
diff --git a/.gitignore b/.gitignore
index 1b9cac0..bdffaf6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,7 +8,6 @@ node_modules/
 db/
 
 # Env var
-.env
 
 # Files
 data-files/
diff --git a/bewcloud.config.sample.ts b/bewcloud.config.sample.ts
deleted file mode 100644
index a22412e..0000000
--- a/bewcloud.config.sample.ts
+++ /dev/null
@@ -1,46 +0,0 @@
-import { Config, PartialDeep } from './lib/types.ts';
-
-/** Check the Config type for all the possible options and instructions. */
-const config: PartialDeep<Config> = {
-  auth: {
-    baseUrl: 'http://localhost:8000', // The base URL of the application you use to access the app, i.e. "http://localhost:8000" or "https://cloud.example.com" (note authentication won't work without https:// except for localhost; SSO redirect, if enabled, will be this + /oidc/callback, so "https://cloud.example.com/oidc/callback")
-    allowSignups: false, // If true, anyone can sign up for an account. Note that it's always possible to sign up for the first user, and they will be an admin
-    enableEmailVerification: false, // If true, email verification will be required for signups (using SMTP settings below)
-    enableForeverSignup: true, // If true, all signups become active for 100 years
-    enableMultiFactor: false, // If true, users can enable multi-factor authentication (TOTP, Passkeys, or Email if the SMTP settings below are set)
-    // allowedCookieDomains: ['example.com', 'example.net'], // Can be set to allow more than the baseUrl's domain for session cookies
-    // skipCookieDomainSecurity: true, // If true, the cookie domain will not be strictly set and checked against. This skipping slightly reduces security, but is usually necessary for reverse proxies like Cloudflare Tunnel
-    // enableSingleSignOn: false, // If true, single sign-on will be enabled
-    // singleSignOnUrl: '', // The Discovery URL (AKA Issuer) of the identity/single sign-on provider
-    // singleSignOnEmailAttribute: 'email', // The attribute to prefer as email of the identity/single sign-on provider
-    // singleSignOnScopes: ['openid', 'email'], // The scopes to request from the identity/single sign-on provider
-  },
-  // files: {
-  //   rootPath: 'data-files',
-  //   allowPublicSharing: false, // If true, public file sharing will be allowed (still requires a user to enable sharing for a given file or directory)
-  //   allowDirectoryDownloads: false, // If true, directories can be downloaded as zip files
-  // },
-  // core: {
-  //   enabledApps: ['news', 'notes', 'photos', 'expenses', 'contacts', 'calendar'], // dashboard and files cannot be disabled
-  // },
-  // visuals: {
-  //   title: 'My own cloud',
-  //   description: 'This is my own cloud!',
-  //   helpEmail: '',
-  // },
-  // email: {
-  //   from: 'help@bewcloud.com',
-  //   host: 'localhost',
-  //   port: 465,
-  // },
-  // contacts: {
-  //   enableCardDavServer: true,
-  //   cardDavUrl: 'http://radicale:5232',
-  // },
-  // calendar: {
-  //   enableCalDavServer: true,
-  //   calDavUrl: 'http://radicale:5232',
-  // },
-};
-
-export default config;
diff --git a/docker-compose.yml b/docker-compose.yml
index 0a97ea6..b9caace 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -16,7 +16,7 @@ services:
     image: postgres:17
     environment:
       - POSTGRES_USER=postgres
-      - POSTGRES_PASSWORD=fake
+      - POSTGRES_PASSWORD=df7c6935a6ff
       - POSTGRES_DB=bewcloud
     restart: always
     volumes: