Mike Swanson
60519be28a
Establish GuruConnect's release engineering and project tracking (SPEC-001): - docs/ scaffold: FEATURE_ROADMAP, ARCHITECTURE_DECISIONS (ADR-001 standalone+contract, ADR-002 Gitea Actions + Azure Trusted Signing), docs/specs/SPEC-001, CHANGELOG. - .gitea/workflows/release.yml: conventional-commit auto-versioning, git-cliff changelog, Windows agent build, Azure Trusted Signing via jsign (reusing the shared ACG cert profile), Gitea release via REST API. build-and-test.yml is the PR/push gate; deploy.yml de-duplicated. - server: GET /api/changelog/:component/:version (latest + by-version), path-traversal hardened. - cliff.toml; server/.env.example documents CHANGELOG_DIR. Reviewed (Code Review Agent): axum route-conflict blocker fixed; CHANGELOG ordering, toolchain target, breaking-change parsing, empty-changelog fallback addressed. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
40 lines
1.4 KiB
Plaintext
40 lines
1.4 KiB
Plaintext
# GuruConnect Server Configuration
|
|
|
|
# REQUIRED: JWT Secret for authentication token signing
|
|
# Generate a new secret with: openssl rand -base64 64
|
|
# CRITICAL: Change this before deploying to production!
|
|
JWT_SECRET=KfPrjjC3J6YMx9q1yjPxZAYkHLM2JdFy1XRxHJ9oPnw0NU3xH074ufHk7fj++e8BJEqRQ5k4zlWD+1iDwlLP4w==
|
|
|
|
# JWT token expiration in hours (default: 24)
|
|
JWT_EXPIRY_HOURS=24
|
|
|
|
# Database connection URL (PostgreSQL)
|
|
# Format: postgresql://username:password@host:port/database
|
|
DATABASE_URL=postgresql://guruconnect:password@172.16.3.30:5432/guruconnect
|
|
|
|
# Maximum database connections in pool
|
|
DATABASE_MAX_CONNECTIONS=10
|
|
|
|
# Server listen address and port
|
|
LISTEN_ADDR=0.0.0.0:3002
|
|
|
|
# Optional: API key for persistent agents
|
|
# If set, persistent agents must provide this key to connect
|
|
AGENT_API_KEY=
|
|
|
|
# Optional: directory containing generated changelog files served at /api/changelog/...
|
|
# Must point at the deployed `changelogs/` directory produced by the release workflow
|
|
# (containing `LATEST_<COMPONENT>.md` and `<component>/v<version>.md`).
|
|
# Defaults to ./changelogs, resolved relative to the server's working directory (CWD) when unset.
|
|
CHANGELOG_DIR=./changelogs
|
|
|
|
# Debug mode (enables verbose logging)
|
|
DEBUG=false
|
|
|
|
# SECURITY NOTES:
|
|
# 1. NEVER commit the actual .env file to git
|
|
# 2. Rotate JWT_SECRET regularly (every 90 days recommended)
|
|
# 3. Use a unique AGENT_API_KEY per deployment
|
|
# 4. Keep DATABASE_URL credentials secure
|
|
# 5. Set restrictive file permissions: chmod 600 .env
|