42 lines
2.5 KiB
Bash
42 lines
2.5 KiB
Bash
# ═══════════════════════════════════════════════════════════════
|
|
# SSH Launcher — Environment Variables
|
|
# Copy to .env.local for local dev, or paste into Vercel dashboard
|
|
# (Settings → Environment Variables → Import .env)
|
|
# ═══════════════════════════════════════════════════════════════
|
|
|
|
# ── GitHub OAuth ─────────────────────────────────────────────
|
|
# Create at https://github.com/settings/developers → New OAuth App
|
|
# Homepage URL: https://your-domain.vercel.app
|
|
# Callback URL: https://your-domain.vercel.app/api/auth/callback/github
|
|
GITHUB_CLIENT_ID=Ov23liBlDuiNR8E2ZmPR
|
|
GITHUB_CLIENT_SECRET=dfd1251347afb0fb09d0ceb97bd53de301b23768
|
|
|
|
# ── NextAuth ─────────────────────────────────────────────────
|
|
# Generate secret: openssl rand -base64 32
|
|
NEXTAUTH_SECRET=N0yaiIpxiVxJrU+xG8cG1CWKRNQ2q3NYjLvd0eEMpic=
|
|
# Required only when self-hosting (Vercel sets this automatically)
|
|
# NEXTAUTH_URL=https://your-domain.vercel.app
|
|
|
|
# ── Upstash Redis ─────────────────────────────────────────────
|
|
# Stores per-user Cloudflare credentials (multi-user)
|
|
# Create a free database at https://console.upstash.com
|
|
# Copy the REST API URL and Token from the database dashboard
|
|
UPSTASH_REDIS_URL=https://native-tadpole-80150.upstash.io
|
|
UPSTASH_REDIS_TOKEN=gQAAAAAAATkWAAIncDIzMWVkNTgxMDMzMzQ0OWVlYjRkY2RiOGM3NTlkYjdlNXAyODAxNTA
|
|
|
|
# ── Cloudflare API (optional — can set per-user via /settings) ─
|
|
# If set here, all users share these credentials (single-user mode)
|
|
# Required Token permissions:
|
|
# Account → Cloudflare Tunnel: Edit
|
|
# Account → Access: Apps and Policies: Edit
|
|
# Zone → DNS: Edit
|
|
# Zone → Zone: Read
|
|
CLOUDFLARE_ACCOUNT_ID=d6c7c05733970cca34c3f3a734195de0
|
|
CLOUDFLARE_API_TOKEN=cfut_kNwpPHUr33ZZqvBl1WJpGA6bBiw5wpfTs8LW8kPAbf601ad8
|
|
|
|
# ── Cloudflare Access Service Token (optional) ───────────────
|
|
# Used to fetch server metrics through Access-protected tunnels
|
|
# Create in Zero Trust → Access → Service Auth → Service Tokens
|
|
CF_SERVICE_CLIENT_ID=
|
|
CF_SERVICE_CLIENT_SECRET=
|