Public Access
admin
7838c49721
- backend: settings SESSION_COOKIE_SECURE + TRUSTED_NETWORK_AUTO_AUTH, require_session uses secrets.compare_digest and respects trusted-network opt-in, main.py adds require_family_session middleware gating all /api/ routes except auth/admin/email-vote-token paths - docker-compose: pass SESSION_COOKIE_SECURE + TRUSTED_NETWORK_AUTO_AUTH through to backend + scheduler (fixes env-file changes not reaching runtime) - frontend: Ingress path-prefix support (APP_BASE_PATH, BrowserRouter basename, vite base './'), Login redirect honors APP_BASE_PATH - nginx: no-cache headers on root + /assets/ - docs: Home Assistant Ingress install/troubleshooting + plan file - tests: test_auth expects 401 on no-session GET Defaults: SESSION_COOKIE_SECURE=false, TRUSTED_NETWORK_AUTO_AUTH=true (HA is the auth boundary; MealPlanner must not be port-forwarded directly).
38 lines
1.0 KiB
Bash
38 lines
1.0 KiB
Bash
# Database
|
|
DATABASE_URL=postgresql://mealplanner:password@db:5432/mealplanner
|
|
POSTGRES_PASSWORD=secure_password_here
|
|
|
|
# SendGrid
|
|
SENDGRID_API_KEY=SG.your_sendgrid_api_key
|
|
|
|
# Family Emails
|
|
FAMILY_EMAIL_1=you@example.com
|
|
FAMILY_EMAIL_2=spouse@example.com
|
|
RECIPES_EMAIL=you@example.com
|
|
|
|
# Lucky California
|
|
LUCKY_CA_URL=https://luckysupermarkets.com
|
|
|
|
# Swiftly product API (Lucky CA backend). The bearer JWT is auto-minted
|
|
# on demand via Firebase REST anon-signUp — see
|
|
# backend/app/services/swiftly_auth.py and
|
|
# docs/specs/2026-05-06-swiftly-token-auto-mint.md. No env var needed.
|
|
LUCKY_STORE_ID=757
|
|
SWIFTLY_API_BASE=https://prod.swiftlyapi.net
|
|
SWIFTLY_CATEGORIES_URL=https://luckysupermarkets.com/categories
|
|
|
|
# AI Image Generation (optional)
|
|
AI_IMAGE_ENABLED=false
|
|
AI_IMAGE_PROVIDER=openai
|
|
AI_IMAGE_API_KEY=sk-your-api-key
|
|
|
|
# Application
|
|
LOG_LEVEL=INFO
|
|
SECRET_KEY=change-me-to-a-random-secret-key
|
|
|
|
# Auth
|
|
ADMIN_TOKEN=change-me-to-a-random-admin-token
|
|
SESSION_PASSWORD=change-me-to-the-family-shared-password
|
|
SESSION_COOKIE_SECURE=false
|
|
TRUSTED_NETWORK_AUTO_AUTH=true
|