-
Notifications
You must be signed in to change notification settings - Fork 21
Expand file tree
/
Copy pathenv.defaults
More file actions
56 lines (48 loc) · 5.48 KB
/
Copy pathenv.defaults
File metadata and controls
56 lines (48 loc) · 5.48 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
# control-plane (Cloudflare Worker vars are documentation-only here; wrangler.toml owns their values.)
# ALLOWED_EMAIL_DOMAINS (string): Comma-separated bare email domains; empty allows any domain on every sign-in; wrangler.toml supplies the runtime value.
# APP_URL (string): Public Worker origin; wrangler.toml supplies the runtime value.
# AWS_ACCESS_KEY_ID (secret string): AWS EC2/EBS credential; set as a Worker secret when that provider is used.
# AWS_IMAGE_ID (string): Optional AMI pin (ami-…); empty resolves the newest Canonical Ubuntu 24.04 amd64 image.
# AWS_REGION (string): AWS region for EC2 and EBS calls; required alongside the AWS credential.
# AWS_SECRET_ACCESS_KEY (secret string): AWS EC2/EBS credential; set as a Worker secret when that provider is used.
# AWS_SECURITY_GROUP_IDS (string): Optional comma-separated sg-… list; empty uses the VPC default group, which refuses inbound SSH.
# AWS_SESSION_TOKEN (secret string): Optional AWS session token for temporary credentials; set as a Worker secret.
# AWS_SUBNET_ID (string): Optional subnet-… pin; also fixes the availability zone an EBS volume must share to attach.
# BOX_IMAGE_REF (string): Box image reference or hosted image URL; wrangler.toml supplies the runtime value.
# BOX_IMAGE_SHA256 (string): Optional SHA-256 for a hosted box image archive; wrangler.toml supplies the runtime value.
# BOX_IMAGE_TAG (string): Optional local tag for a hosted box image archive; wrangler.toml supplies the runtime value.
# BOX_LODY_SESSIONS (string): Box-config enables Lody only when this Worker var is exactly "1"; unset or any other value keeps it off.
# CLOUDFLARE_ACCOUNT_ID (string): Cloudflare account that owns workspace tunnels; wrangler.toml supplies the runtime value.
# CLOUDFLARE_API_TOKEN (secret string): Cloudflare API token with Tunnel Edit + DNS Edit; set as a Worker secret.
# CLOUDFLARE_ZONE_ID (string): Zone holding ws-<id> workspace hostnames; wrangler.toml supplies the runtime value.
# CRED_MASTER_KEY (secret string): Base64-encoded credential encryption key; set as a Worker secret.
# GITHUB_APP_CLIENT_ID (string): GitHub App client id for /connect/github; unset leaves the provider un-connectable and the picker says so.
# GITHUB_APP_CLIENT_SECRET (secret string): GitHub App client secret for /connect/github; set as a Worker secret.
# GOOGLE_CONNECT_CLIENT_ID (string): OAuth client id for /connect/google-workspace; separate from GOOGLE_CLIENT_ID, which is the login client.
# GOOGLE_CONNECT_CLIENT_SECRET (secret string): OAuth client secret for /connect/google-workspace; set as a Worker secret.
# HETZNER_API_TOKEN (secret string): Hetzner API credential; set as a Worker secret when that provider is used.
# HETZNER_MACHINE_TYPES (string): Comma-separated "type@location" machine catalog entries; unset or blank offers cpx21@hil and cpx31@hil.
# HETZNER_SERVER_IMAGES (string): Comma-separated "location=image" golden-image entries for the deployment Hetzner project (for example "hel1=163000001,*=ubuntu-24.04"); unset or blank boots stock Ubuntu and pays the full bootstrap. A snapshot belongs to one project, so this never reaches a BYOK organization.
# JWT_SECRET_MAIN (secret string): Session-signing key; set as a Worker secret.
# LINEAR_CLIENT_ID (string): OAuth client id for /connect/linear; unset leaves the provider un-connectable and the picker says so.
# LINEAR_CLIENT_SECRET (secret string): OAuth client secret for /connect/linear; set as a Worker secret.
# OPERATOR_API_KEY (secret string): Operator API credential; set as a Worker secret.
# RESPOND_WITH_ERRORS (boolean): Whether Teenybase responses include internal error details; the Worker platform supplies the runtime value.
# RESPOND_WITH_QUERY_LOG (boolean): Whether Teenybase responses include query logs; the Worker platform supplies the runtime value.
# SESSION_TTL_DAYS (integer): Session lifetime in days; wrangler.toml supplies the runtime value.
# SIGNUP_MODE (string): "open" (default) or "invite"; gates account creation only; wrangler.toml supplies the runtime value.
# WEBAPP_TOKEN_SECRET (secret string): HMAC key deriving per-workspace webApp tokens; set as a Worker secret.
# WORKSPACE_TUNNEL_ZONE (string): Zone name for workspace tunnel hostnames; empty disables tunnels; wrangler.toml supplies the runtime value.
# webapp
# public boolean: Reach the box's Lody session daemon from the browser. The box updater materializes the matching BLITZ_LODY_SESSIONS feature; off until the session surface ships.
VITE_BLITZ_LODY_SESSIONS=false
# public string: Optional separate control-plane origin; empty uses the webapp's own origin.
VITE_CONTROL_PLANE_URL=
# public string: Dev-server proxy target for control-plane API routes; empty proxies nothing.
VITE_DEV_PROXY_TARGET=
# public string: Optional comma-separated host suffixes whose https preview links embed inline; empty embeds only blitz.dev.
VITE_EMBEDDABLE_PREVIEW_SUFFIXES=
# public string: Which Lody platform composition the renderer assembles. Must stay `local`: the box daemon runs the local composition, and getAppPlatformKind() strands RuntimeProvider on any other value.
VITE_LODY_PLATFORM=local
# public string: The domain Lody's managed public previews would live under. Their renderer THROWS at module load without it (components/src/lib/preview-public-config.ts) and we run no managed previews, so this is their own Electron build's inert value (vendor/lody/apps/electron/electron.vite.config.ts:44). packages/webapp/vite.config.ts repeats it under `test.env`, which is how tests see it.
VITE_PREVIEW_PUBLIC_BASE_DOMAIN=local.invalid