ready for prod?

.env

@@ -2,13 +2,13 @@ PORT=8000
 
 POSTGRESQL_HOST="postgresql" # docker container name or external hostname/IP
 POSTGRESQL_USER="postgres"
-POSTGRESQL_PASSWORD="fake"
+POSTGRESQL_PASSWORD="df7c6935a6ff"
 POSTGRESQL_DBNAME="bewcloud"
 POSTGRESQL_PORT=5432
 POSTGRESQL_CAFILE=""
 
-JWT_SECRET="fake"
+JWT_SECRET="zfl655gcdax8hg9dp5fb47qk2"
-PASSWORD_SALT="fake"
+PASSWORD_SALT="5a9bbb7d546"
 
 MFA_KEY="fake" # optional, if you want to enable multi-factor authentication
 MFA_SALT="fake" # optional, if you want to enable multi-factor authentication

.gitignore

@@ -8,7 +8,6 @@ node_modules/
 db/
 
 # Env var
-.env
 
 # Files
 data-files/

bewcloud.config.sample.ts

@@ -1,46 +0,0 @@
-import { Config, PartialDeep } from './lib/types.ts';
-
-/** Check the Config type for all the possible options and instructions. */
-const config: PartialDeep<Config> = {
-  auth: {
-    baseUrl: 'http://localhost:8000', // The base URL of the application you use to access the app, i.e. "http://localhost:8000" or "https://cloud.example.com" (note authentication won't work without https:// except for localhost; SSO redirect, if enabled, will be this + /oidc/callback, so "https://cloud.example.com/oidc/callback")
-    allowSignups: false, // If true, anyone can sign up for an account. Note that it's always possible to sign up for the first user, and they will be an admin
-    enableEmailVerification: false, // If true, email verification will be required for signups (using SMTP settings below)
-    enableForeverSignup: true, // If true, all signups become active for 100 years
-    enableMultiFactor: false, // If true, users can enable multi-factor authentication (TOTP, Passkeys, or Email if the SMTP settings below are set)
-    // allowedCookieDomains: ['example.com', 'example.net'], // Can be set to allow more than the baseUrl's domain for session cookies
-    // skipCookieDomainSecurity: true, // If true, the cookie domain will not be strictly set and checked against. This skipping slightly reduces security, but is usually necessary for reverse proxies like Cloudflare Tunnel
-    // enableSingleSignOn: false, // If true, single sign-on will be enabled
-    // singleSignOnUrl: '', // The Discovery URL (AKA Issuer) of the identity/single sign-on provider
-    // singleSignOnEmailAttribute: 'email', // The attribute to prefer as email of the identity/single sign-on provider
-    // singleSignOnScopes: ['openid', 'email'], // The scopes to request from the identity/single sign-on provider
-  },
-  // files: {
-  //   rootPath: 'data-files',
-  //   allowPublicSharing: false, // If true, public file sharing will be allowed (still requires a user to enable sharing for a given file or directory)
-  //   allowDirectoryDownloads: false, // If true, directories can be downloaded as zip files
-  // },
-  // core: {
-  //   enabledApps: ['news', 'notes', 'photos', 'expenses', 'contacts', 'calendar'], // dashboard and files cannot be disabled
-  // },
-  // visuals: {
-  //   title: 'My own cloud',
-  //   description: 'This is my own cloud!',
-  //   helpEmail: '',
-  // },
-  // email: {
-  //   from: 'help@bewcloud.com',
-  //   host: 'localhost',
-  //   port: 465,
-  // },
-  // contacts: {
-  //   enableCardDavServer: true,
-  //   cardDavUrl: 'http://radicale:5232',
-  // },
-  // calendar: {
-  //   enableCalDavServer: true,
-  //   calDavUrl: 'http://radicale:5232',
-  // },
-};
-
-export default config;

docker-compose.yml

@@ -16,7 +16,7 @@ services:
     image: postgres:17
     environment:
       - POSTGRES_USER=postgres
-      - POSTGRES_PASSWORD=fake
+      - POSTGRES_PASSWORD=df7c6935a6ff
       - POSTGRES_DB=bewcloud
     restart: always
     volumes: