27 lines
1.1 KiB
Bash
27 lines
1.1 KiB
Bash
# Copy this file to .env and replace every change-me value.
|
|
KC_BOOTSTRAP_ADMIN_USERNAME=admin
|
|
KC_BOOTSTRAP_ADMIN_PASSWORD=change-me-admin-password
|
|
|
|
POSTGRES_DB=keycloak
|
|
POSTGRES_USER=keycloak
|
|
POSTGRES_PASSWORD=change-me-postgres-password
|
|
|
|
# Keycloak resolves these placeholders while importing the realm.
|
|
TOKEN_MEDIATING_CLIENT_SECRET=change-me-token-mediating-client-secret
|
|
BFF_CLIENT_SECRET=change-me-bff-client-secret
|
|
EDGE_PROXY_CLIENT_SECRET=change-me-edge-proxy-client-secret
|
|
OAUTH2_PROXY_COOKIE_SECRET=generate-a-base64-encoded-32-byte-secret
|
|
INTERNAL_AUTH_TOKEN=generate-a-long-random-edge-to-backend-token
|
|
MOCK_GOOGLE_BROKER_CLIENT_SECRET=change-me-mock-google-broker-client-secret
|
|
ADMIN_USER_PASSWORD=change-me-admin-user-password
|
|
REGULAR_USER_PASSWORD=change-me-regular-user-password
|
|
MOCK_GOOGLE_USER_PASSWORD=change-me-mock-google-user-password
|
|
|
|
# Optional real-Google profile. These are consumed only by
|
|
# scripts/configure-google-idp.sh and must never be committed with real values.
|
|
GOOGLE_CLIENT_ID=
|
|
GOOGLE_CLIENT_SECRET=
|
|
|
|
# Port 80 is the single-EC2 target. 8088 avoids common local port conflicts.
|
|
NGINX_PORT=8088
|