AgriInsight/.env.auth-spike.example at main · JasonTM17/AgriInsight · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
# Copy to an ignored .env.auth-spike.local file and replace every placeholder.
# Never commit the local file or reuse these disposable demo values in deployment.
AUTH_SPIKE_POSTGRES_PASSWORD=<unique-local-postgres-password>
AUTH_SPIKE_POSTGRES_PORT=55439
AUTH_SPIKE_DATABASE_URL=postgresql://auth_spike_owner:<url-encoded-postgres-password>@localhost:55439/auth_spike

AUTH_SPIKE_KEYCLOAK_ADMIN_USERNAME=<local-admin-username>
AUTH_SPIKE_KEYCLOAK_ADMIN_PASSWORD=<unique-local-admin-password>
AUTH_SPIKE_KEYCLOAK_PORT=58080
AUTH_SPIKE_OIDC_ISSUER=http://localhost:58080/realms/agriinsight-demo
AUTH_SPIKE_OIDC_CLIENT_ID=agriinsight-web
AUTH_SPIKE_OIDC_CLIENT_SECRET=<unique-local-client-secret>
AUTH_SPIKE_OIDC_AUDIENCE=agriinsight-api

# Generate 32 random bytes and encode them as base64 outside this repository.
AUTH_SPIKE_SESSION_ENCRYPTION_KEY_BASE64=<base64-encoded-32-byte-key>
AUTH_SPIKE_TOKEN_KEY_ID=local-spike-2026-07
AUTH_SPIKE_SESSION_LIFETIME_SECONDS=28800
AUTH_SPIKE_BASE_URL=http://localhost:3100
AUTH_SPIKE_CALLBACK_URL=http://localhost:3100/api/auth/callback/keycloak
AUTH_SPIKE_ALLOWED_HOST=localhost:3100

# Runtime-only passwords for the seven stable demo personas.
AUTH_SPIKE_TENANT_ADMIN_PASSWORD=<unique-local-password>
AUTH_SPIKE_EXECUTIVE_PASSWORD=<unique-local-password>
AUTH_SPIKE_FARM_MANAGER_PASSWORD=<unique-local-password>
AUTH_SPIKE_INVENTORY_MANAGER_PASSWORD=<unique-local-password>
AUTH_SPIKE_ANALYST_PASSWORD=<unique-local-password>
AUTH_SPIKE_FIELD_WORKER_PASSWORD=<unique-local-password>
AUTH_SPIKE_SUPPLIER_PASSWORD=<unique-local-password>

# Playwright signs in only as this selected persona; values stay in the local environment.
AUTH_SPIKE_TEST_USERNAME=tenant-admin
AUTH_SPIKE_TEST_PASSWORD=<matching-local-persona-password>
AUTH_SPIKE_RUN_POSTGRES_TESTS=1