mirror of
https://github.com/documenso/documenso.git
synced 2025-11-12 07:43:16 +10:00
d766b58f42
## Description Currently we are required to ensure PII data is not passed around in search parameters and in the open for GDPR reasons. Allowing us to encrypt and decrypt values with expiry dates will allow us to ensure this doesn't happen. ## Changes Made - Added TPRC router for encryption method ## Testing Performed - Tested encrypting and decrypting data with and without `expiredAt` - Tested via directly accessing API and also via trpc in react components - Tested parsing en email search param in a page and decrypting it successfully ## Checklist - [X] I have tested these changes locally and they work as expected. - [X] I have followed the project's coding style guidelines.
95 lines
3.9 KiB
Plaintext
95 lines
3.9 KiB
Plaintext
# [[AUTH]]
|
|
NEXTAUTH_URL="http://localhost:3000"
|
|
NEXTAUTH_SECRET="secret"
|
|
|
|
# [[CRYPTO]]
|
|
# Application Key for symmetric encryption and decryption
|
|
# REQUIRED: This should be a random string of at least 32 characters
|
|
NEXT_PRIVATE_ENCRYPTION_KEY=""
|
|
# REQUIRED: This should be a random string of at least 32 characters
|
|
NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY=""
|
|
|
|
# [[AUTH OPTIONAL]]
|
|
NEXT_PRIVATE_GOOGLE_CLIENT_ID=""
|
|
NEXT_PRIVATE_GOOGLE_CLIENT_SECRET=""
|
|
|
|
# [[URLS]]
|
|
NEXT_PUBLIC_WEBAPP_URL="http://localhost:3000"
|
|
NEXT_PUBLIC_MARKETING_URL="http://localhost:3001"
|
|
|
|
# [[DATABASE]]
|
|
NEXT_PRIVATE_DATABASE_URL="postgres://documenso:password@127.0.0.1:54320/documenso"
|
|
# Defines the URL to use for the database when running migrations and other commands that won't work with a connection pool.
|
|
NEXT_PRIVATE_DIRECT_DATABASE_URL="postgres://documenso:password@127.0.0.1:54320/documenso"
|
|
|
|
# [[E2E Tests]]
|
|
E2E_TEST_AUTHENTICATE_USERNAME="Test User"
|
|
E2E_TEST_AUTHENTICATE_USER_EMAIL="testuser@mail.com"
|
|
E2E_TEST_AUTHENTICATE_USER_PASSWORD="test_password"
|
|
|
|
# [[STORAGE]]
|
|
# OPTIONAL: Defines the storage transport to use. Available options: database (default) | s3
|
|
NEXT_PUBLIC_UPLOAD_TRANSPORT="database"
|
|
# OPTIONAL: Defines the endpoint to use for the S3 storage transport. Relevant when using third-party S3-compatible providers.
|
|
NEXT_PRIVATE_UPLOAD_ENDPOINT="http://127.0.0.1:9002"
|
|
# OPTIONAL: Defines the region to use for the S3 storage transport. Defaults to us-east-1.
|
|
NEXT_PRIVATE_UPLOAD_REGION="unknown"
|
|
# REQUIRED: Defines the bucket to use for the S3 storage transport.
|
|
NEXT_PRIVATE_UPLOAD_BUCKET="documenso"
|
|
# OPTIONAL: Defines the access key ID to use for the S3 storage transport.
|
|
NEXT_PRIVATE_UPLOAD_ACCESS_KEY_ID="documenso"
|
|
# OPTIONAL: Defines the secret access key to use for the S3 storage transport.
|
|
NEXT_PRIVATE_UPLOAD_SECRET_ACCESS_KEY="password"
|
|
|
|
# [[SMTP]]
|
|
# OPTIONAL: Defines the transport to use for sending emails. Available options: smtp-auth (default) | smtp-api | mailchannels
|
|
NEXT_PRIVATE_SMTP_TRANSPORT="smtp-auth"
|
|
# OPTIONAL: Defines the host to use for sending emails.
|
|
NEXT_PRIVATE_SMTP_HOST="127.0.0.1"
|
|
# OPTIONAL: Defines the port to use for sending emails.
|
|
NEXT_PRIVATE_SMTP_PORT=2500
|
|
# OPTIONAL: Defines the username to use with the SMTP server.
|
|
NEXT_PRIVATE_SMTP_USERNAME="documenso"
|
|
# OPTIONAL: Defines the password to use with the SMTP server.
|
|
NEXT_PRIVATE_SMTP_PASSWORD="password"
|
|
# OPTIONAL: Defines the API key user to use with the SMTP server.
|
|
NEXT_PRIVATE_SMTP_APIKEY_USER=
|
|
# OPTIONAL: Defines the API key to use with the SMTP server.
|
|
NEXT_PRIVATE_SMTP_APIKEY=
|
|
# OPTIONAL: Defines whether to force the use of TLS.
|
|
NEXT_PRIVATE_SMTP_SECURE=
|
|
# REQUIRED: Defines the sender name to use for the from address.
|
|
NEXT_PRIVATE_SMTP_FROM_NAME="No Reply @ Documenso"
|
|
# REQUIRED: Defines the email address to use as the from address.
|
|
NEXT_PRIVATE_SMTP_FROM_ADDRESS="noreply@documenso.com"
|
|
# OPTIONAL: The API key to use for Resend.com
|
|
NEXT_PRIVATE_RESEND_API_KEY=
|
|
# OPTIONAL: The API key to use for MailChannels.
|
|
NEXT_PRIVATE_MAILCHANNELS_API_KEY=
|
|
# OPTIONAL: The endpoint to use for the MailChannels API if using a proxy.
|
|
NEXT_PRIVATE_MAILCHANNELS_ENDPOINT=
|
|
# OPTIONAL: The domain to use for DKIM signing.
|
|
NEXT_PRIVATE_MAILCHANNELS_DKIM_DOMAIN=
|
|
# OPTIONAL: The selector to use for DKIM signing.
|
|
NEXT_PRIVATE_MAILCHANNELS_DKIM_SELECTOR=
|
|
# OPTIONAL: The private key to use for DKIM signing.
|
|
NEXT_PRIVATE_MAILCHANNELS_DKIM_PRIVATE_KEY=
|
|
|
|
# [[STRIPE]]
|
|
NEXT_PRIVATE_STRIPE_API_KEY=
|
|
NEXT_PRIVATE_STRIPE_WEBHOOK_SECRET=
|
|
NEXT_PUBLIC_STRIPE_COMMUNITY_PLAN_MONTHLY_PRICE_ID=
|
|
|
|
# [[FEATURES]]
|
|
# OPTIONAL: Leave blank to disable PostHog and feature flags.
|
|
NEXT_PUBLIC_POSTHOG_KEY=""
|
|
# OPTIONAL: Leave blank to disable billing.
|
|
NEXT_PUBLIC_FEATURE_BILLING_ENABLED=
|
|
# OPTIONAL: Leave blank to allow users to signup through /signup page.
|
|
NEXT_PUBLIC_DISABLE_SIGNUP=
|
|
|
|
# This is only required for the marketing site
|
|
# [[REDIS]]
|
|
NEXT_PRIVATE_REDIS_URL=
|
|
NEXT_PRIVATE_REDIS_TOKEN=
|