maikrolf
88f2c7e5aa
- Adds IPFS_WRITE_TOKEN to lib/config.ts - Default-deny per route (not per method): the public explorer issues reads as POST - Existing portal session JWT remains valid, so the logged-in UI keeps working - Public gateway reads (/ipfs/<cid>) are unchanged
32 lines
1.2 KiB
Bash
32 lines
1.2 KiB
Bash
# ── IPFS Portal Environment Variables ──
|
|
# Copy to .env.local (dev) or .env.production (prod)
|
|
|
|
# JWT secret for session cookies (REQUIRED in production — generate with: openssl rand -hex 32)
|
|
# JWT_SECRET=
|
|
|
|
# Python User Management API
|
|
# USER_API_BASE=http://localhost:8444
|
|
# USER_API_ADMIN_KEY=
|
|
|
|
# Kubo RPC API (optional — if behind proxy)
|
|
# KUBO_API_URL=http://localhost:5001
|
|
# KUBO_BASIC_AUTH=user:password
|
|
|
|
# zkSync Local RPC + Explorer (smart contract chain 270)
|
|
# ZKSYNC_RPC_URL=http://localhost:3050
|
|
# NEXT_PUBLIC_ZKSYNC_RPC_URL=http://localhost:3050
|
|
# NEXT_PUBLIC_ZKSYNC_EXPLORER_URL=http://localhost:3050
|
|
|
|
# Contract address (default deployed on chain 270)
|
|
# PAYMENT_CONTRACT_ADDRESS=0xCBc6b8aeea129c206F4836799621C833Bf8B9BDe
|
|
|
|
# IPFS Gateway (for share links)
|
|
# NEXT_PUBLIC_GATEWAY_URL=https://ipfs.maos.dedyn.io
|
|
|
|
# Write-authentication voor muterende /api/* endpoints
|
|
# (POST /api/add, /api/files/upload, /api/pins; DELETE /api/files/<cid>, /api/pins/<cid>).
|
|
# Zonder deze waarde blijven writes OPEN met een luide waarschuwing in de log.
|
|
# Zelfde waarde als IPFS_WRITE_TOKEN aan de MAOS-kant (anders pint MAOS niet mee).
|
|
# Genereer met: openssl rand -hex 32
|
|
# IPFS_WRITE_TOKEN=
|