f801d2a7eb
The AWS SDK throws "Region is missing" when S3Client is constructed with an empty-string region, so any S3 feature (avatars, attachments, presigned URL generation) is silently broken when S3_REGION is unset — even though .env.example ships it unset and env.ts declares it optional. The schema and the runtime disagreed about whether the var was required. Default to "us-east-1" in createS3Client. S3-compatible providers (MinIO, Backblaze B2, R2, DigitalOcean Spaces, Wasabi) ignore the region entirely; real AWS S3 users should set S3_REGION explicitly to their bucket's actual region (clarified in .env.example). Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
98 lines
2.7 KiB
Plaintext
98 lines
2.7 KiB
Plaintext
# https://github.com/kanbn/kan?tab=readme-ov-file#environment-variables-)
|
|
|
|
# Required environment variables
|
|
NEXT_PUBLIC_BASE_URL= # e.g. https://kan.bn
|
|
BETTER_AUTH_SECRET= # Random 32+ char string (can gen with: openssl rand -base64 26 | tr -dc 'a-zA-Z0-9' | head -c 32)
|
|
|
|
# Fill if you want to use an external database
|
|
POSTGRES_URL= # e.g. postgresql://kan:your_password@your_host:5432/kan
|
|
|
|
# Only required if deploying from compose
|
|
POSTGRES_PASSWORD=
|
|
|
|
# SMTP (optional)
|
|
SMTP_HOST=
|
|
SMTP_PORT=465
|
|
SMTP_USER=
|
|
SMTP_PASSWORD=
|
|
EMAIL_FROM= # e.g. "Kan <hello@mail.kan.bn>"
|
|
SMTP_SECURE= # set to "false" to use port 587
|
|
SMTP_REJECT_UNAUTHORIZED= # set to "false" to accept invalid certs
|
|
|
|
# Switch email features off entirely (optional)
|
|
NEXT_PUBLIC_DISABLE_EMAIL=
|
|
|
|
# S3 storage (optional)
|
|
S3_REGION= # required for AWS S3 (e.g. us-east-1); ignored by most S3-compatible providers — defaults to us-east-1 if unset
|
|
S3_ENDPOINT= # set for S3-compatible providers (MinIO, R2, Spaces, etc.); leave blank for AWS S3
|
|
S3_ACCESS_KEY_ID=
|
|
S3_SECRET_ACCESS_KEY=
|
|
S3_FORCE_PATH_STYLE=
|
|
# S3_AVATAR_UPLOAD_LIMIT=2097152 # Avatar upload size limit in bytes (default: 2MB)
|
|
NEXT_PUBLIC_STORAGE_URL=
|
|
NEXT_PUBLIC_AVATAR_BUCKET_NAME=
|
|
NEXT_PUBLIC_ATTACHMENTS_BUCKET_NAME=
|
|
NEXT_PUBLIC_STORAGE_DOMAIN=
|
|
NEXT_PUBLIC_USE_VIRTUAL_HOSTED_URLS=
|
|
|
|
|
|
# Auth config (optional)
|
|
NEXT_PUBLIC_ALLOW_CREDENTIALS=
|
|
NEXT_PUBLIC_DISABLE_SIGN_UP=
|
|
|
|
# API configuration (optional)
|
|
NEXT_API_BODY_SIZE_LIMIT= # e.g. 50mb (defaults to 1mb)
|
|
|
|
# Integration providers (optional)
|
|
TRELLO_APP_API_KEY=
|
|
TRELLO_APP_SECRET=
|
|
|
|
# Redis (optional - for rate limiting)
|
|
# If not provided, rate limiting will use in-memory storage
|
|
REDIS_URL= # e.g. redis://default:your_password@your_host:6379
|
|
|
|
# Logging (optional - debug, info, warn, error; defaults to debug in dev, info in prod)
|
|
LOG_LEVEL=
|
|
|
|
# OAuth providers (optional)
|
|
BETTER_AUTH_TRUSTED_ORIGINS=
|
|
# Optional: Restrict OIDC/Social sign-ins to specific email domains (comma-separated)
|
|
BETTER_AUTH_ALLOWED_DOMAINS=
|
|
GOOGLE_CLIENT_ID=
|
|
GOOGLE_CLIENT_SECRET=
|
|
DISCORD_CLIENT_ID=
|
|
DISCORD_CLIENT_SECRET=
|
|
GITHUB_CLIENT_ID=
|
|
GITHUB_CLIENT_SECRET=
|
|
GITLAB_CLIENT_ID=
|
|
GITLAB_CLIENT_SECRET=
|
|
GITLAB_ISSUER=
|
|
MICROSOFT_CLIENT_ID=
|
|
MICROSOFT_CLIENT_SECRET=
|
|
TWITTER_CLIENT_ID=
|
|
TWITTER_CLIENT_SECRET=
|
|
KICK_CLIENT_ID=
|
|
KICK_CLIENT_SECRET=
|
|
ZOOM_CLIENT_ID=
|
|
ZOOM_CLIENT_SECRET=
|
|
DROPBOX_CLIENT_ID=
|
|
DROPBOX_CLIENT_SECRET=
|
|
VK_CLIENT_ID=
|
|
VK_CLIENT_SECRET=
|
|
LINKEDIN_CLIENT_ID=
|
|
LINKEDIN_CLIENT_SECRET=
|
|
REDDIT_CLIENT_ID=
|
|
REDDIT_CLIENT_SECRET=
|
|
ROBLOX_CLIENT_ID=
|
|
ROBLOX_CLIENT_SECRET=
|
|
SPOTIFY_CLIENT_ID=
|
|
SPOTIFY_CLIENT_SECRET=
|
|
TIKTOK_CLIENT_ID=
|
|
TIKTOK_CLIENT_SECRET=
|
|
TIKTOK_CLIENT_KEY=
|
|
TWITCH_CLIENT_ID=
|
|
TWITCH_CLIENT_SECRET=
|
|
APPLE_CLIENT_ID=
|
|
APPLE_CLIENT_SECRET=
|
|
APPLE_APP_BUNDLE_IDENTIFIER=
|