mirror of
https://github.com/eitchtee/WYGIWYH.git
synced 2026-11-13 12:23:44 +01:00
fariskazmi
161fc19721
When the flag is on and an OIDC provider is configured, every e-mail and password check is refused: the login page, the admin and the API's basic auth. OIDC logins, API tokens, OAuth apps and permission checks keep working. The login page hides the password form.
64 lines
2.5 KiB
Bash
64 lines
2.5 KiB
Bash
SERVER_NAME=wygiwyh_server
|
|
DB_NAME=wygiwyh_pg
|
|
|
|
TZ=UTC # Change to your timezone. This only affects some async tasks.
|
|
|
|
DEBUG=false
|
|
URL = https://...
|
|
HTTPS_ENABLED=true
|
|
SECRET_KEY=<GENERATE A SAFE SECRET KEY AND PLACE IT HERE>
|
|
DJANGO_ALLOWED_HOSTS=localhost 127.0.0.1 [::1]
|
|
OUTBOUND_PORT=9005
|
|
|
|
# Uncomment these variables to automatically create an admin account using these credentials on startup.
|
|
# After your first successfull login you can remove these variables from your file for safety reasons.
|
|
#ADMIN_EMAIL=<ENTER YOUR EMAIL>
|
|
#ADMIN_PASSWORD=<YOUR SAFE PASSWORD>
|
|
|
|
SQL_DATABASE=wygiwyh
|
|
SQL_USER=wygiwyh
|
|
SQL_PASSWORD=<INSERT A SAFE PASSWORD HERE>
|
|
SQL_HOST=${DB_NAME}
|
|
SQL_PORT=5432
|
|
|
|
# Gunicorn
|
|
WEB_CONCURRENCY=4
|
|
|
|
# App Configs
|
|
# Enable this if you want to keep deleted transactions in the database
|
|
ENABLE_SOFT_DELETE=false
|
|
# If ENABLE_SOFT_DELETE is true, transactions deleted for more than KEEP_DELETED_TRANSACTIONS_FOR days will be truly deleted. Set to 0 to keep all.
|
|
KEEP_DELETED_TRANSACTIONS_FOR=365
|
|
|
|
TASK_WORKERS=1 # This only work if you're using the single container option. Increase to have more open queues via procrastinate, you probably don't need to increase this.
|
|
|
|
# OIDC Configuration. Uncomment the lines below if you want to add OIDC login to your instance
|
|
#OIDC_CLIENT_NAME=""
|
|
#OIDC_CLIENT_ID=""
|
|
#OIDC_CLIENT_SECRET=""
|
|
#OIDC_SERVER_URL=""
|
|
#OIDC_ALLOW_SIGNUP=true
|
|
# Trust all provider emails, including false or missing email_verified claims.
|
|
# Set to false to require provider-verified emails before linking existing accounts.
|
|
#OIDC_TRUST_EMAIL=true
|
|
# Only allow signing in through OIDC: e-mail and password logins are refused everywhere.
|
|
#OIDC_DISABLE_LOCAL_LOGIN=false
|
|
|
|
# Personal access tokens. How often (seconds) a token's last_used_at is rewritten.
|
|
#API_TOKEN_LAST_USED_UPDATE_INTERVAL=600
|
|
|
|
# MCP OAuth Application. Uncomment to auto-create/update the OAuth client
|
|
# used by remote MCP integrations after migrations complete.
|
|
#MCP_OAUTH_CLIENT_NAME="WYGIWYH MCP"
|
|
#MCP_OAUTH_CLIENT_ID="mcp-wygiwyh"
|
|
#MCP_OAUTH_CLIENT_SECRET="<INSERT A SAFE SECRET HERE>"
|
|
#MCP_OAUTH_REDIRECT_URIS="http://127.0.0.1:8765/callback"
|
|
#MCP_OAUTH_SKIP_AUTHORIZATION=false
|
|
|
|
# Dynamic Client Registration (RFC 7591). Disabled by default because an open
|
|
# registration endpoint lets anyone create OAuth applications. Enable only if
|
|
# remote MCP clients must self-register, and optionally require an initial
|
|
# access token (sent as "Authorization: Bearer <token>" on /oauth/register/).
|
|
#OAUTH2_DCR_ENABLED=false
|
|
#OAUTH2_DCR_INITIAL_ACCESS_TOKEN=""
|