forked from
joebasser.com/atmosphere-account
this repo has no description
1# Copy to `.env` and fill in secrets. `.env` is gitignored.
2#
3# Turso (registry index, OAuth state, app sessions)
4TURSO_DATABASE_URL=libsql://atmosphere-account-jobiwanken0bi.aws-us-east-1.turso.io
5TURSO_AUTH_TOKEN=
6
7# Site URL for OAuth client_id / redirects (production: https://atmosphereaccount.com)
8# FRESH_PUBLIC_SITE_URL=http://localhost:5173
9
10# Curator DID for the featured directory record (indexer + publish:featured)
11# ATMOSPHERE_DID=
12
13# Comma-separated DIDs allowed to access /admin and /api/admin/* routes.
14# Leave unset on forks — /admin will then be effectively unreachable.
15# ADMIN_DIDS=
16
17# Secret used to hash reporter IPs (24h dedup + soft rate-limit only).
18# Falls back to SESSION_SECRET if unset; set a dedicated value in production
19# so rotating one secret doesn't invalidate the other.
20# REPORT_IP_SECRET=
21
22# OAuth confidential client — run: deno task gen:oauth-key
23#
24# IMPORTANT: paste the values EXACTLY as printed by the script. The JWK
25# values are JSON objects starting with `{` and ending with `}`. Do NOT
26# wrap them in extra quotes. For Deno Deploy / hosted env UIs, paste the
27# raw JSON object — leave the braces in place.
28# OAUTH_PRIVATE_JWK={"kty":"EC",...,"kid":"..."}
29# OAUTH_PUBLIC_JWK={"kty":"EC",...,"kid":"..."}
30# OAUTH_KID=
31# SESSION_SECRET=
32
33# Indexer worker (Fly.io); default is fine for US East
34# JETSTREAM_URL=wss://jetstream2.us-east.bsky.network/subscribe