mirror of
https://github.com/joaovitoriasilva/endurain.git
synced 2026-01-06 22:43:54 -05:00
f6e06fb3e6
Implements optional session idle and absolute timeout logic, including new environment variables for configuration. Adds last_activity_at to sessions, enforces timeouts on token refresh, and introduces a scheduler job to clean up idle sessions. Also introduces progressive lockout for failed logins and updates documentation and examples accordingly.
31 lines
1.5 KiB
Plaintext
31 lines
1.5 KiB
Plaintext
# This is an environment variable file for Endurain's docker-compose.yml.example
|
|
# These are just the variable you have to set to be up and running.
|
|
# There is many more variable you could set. Check them out here: https://docs.endurain.com/getting-started/advanced-started/#supported-environment-variables
|
|
|
|
DB_PASSWORD=changeme # Set a strong password here. Check if there are no trailing whitespaces in the beginning and end. Must be the same as POSTGRES_PASSWORD
|
|
POSTGRES_PASSWORD=changeme # Must be the same as DB_PASSWORD
|
|
SECRET_KEY=changeme
|
|
FERNET_KEY=changeme
|
|
TZ=Europe/Lisbon
|
|
ENDURAIN_HOST=https://endurain.example.com
|
|
BEHIND_PROXY=true
|
|
POSTGRES_DB=endurain # If you change this, you also have to change DB_DATABASE
|
|
# DB_DATABASE=endurain # Uncomment and set it to the same as POSTGRES_DB if you change it
|
|
POSTGRES_USER=endurain # If you change this, you also have to change DB_USER
|
|
# DB_USER=endurain # Uncomment and set it to the same as POSTGRES_USER if you change it
|
|
PGDATA=/var/lib/postgresql/data/pgdata
|
|
|
|
# Optional: Enable session timeouts (default: false)
|
|
#SESSION_IDLE_TIMEOUT_ENABLED=true # Enable idle session timeout
|
|
# If enabled, configure timeout durations
|
|
#SESSION_IDLE_TIMEOUT_HOURS=1 # Idle timeout (no activity)
|
|
#SESSION_ABSOLUTE_TIMEOUT_HOURS=24 # Absolute max session lifetime
|
|
|
|
# Email configuration (for password reset functionality)
|
|
#SMTP_HOST=smtp.protonmail.ch
|
|
#SMTP_PORT=587
|
|
#SMTP_USERNAME=your-email@example.com
|
|
#SMTP_PASSWORD=your-app-password
|
|
#SMTP_SECURE=true
|
|
#SMTP_SECURE_TYPE=starttls
|