bewcloud/.env.sample

PORT=8000

POSTGRESQL_HOST="postgresql" # docker container name or external hostname/IP
POSTGRESQL_USER="postgres"
POSTGRESQL_PASSWORD="fake"
POSTGRESQL_DBNAME="bewcloud"
POSTGRESQL_PORT=5432
POSTGRESQL_CAFILE=""

JWT_SECRET="fake"
PASSWORD_SALT="fake"

MFA_KEY="fake" # optional, if you want to enable multi-factor authentication
MFA_SALT="fake" # optional, if you want to enable multi-factor authentication

OIDC_CLIENT_ID="fake" # optional, if you want to enable SSO (Single Sign-On)
OIDC_CLIENT_SECRET="fake" # optional, if you want to enable SSO (Single Sign-On)

#SMTP_USERNAME=""  # optional, if you want to use signup email verification or multi-factor with an email service requiring authentication
#SMTP_PASSWORD=""  # optional, if you want to use signup email verification or multi-factor with an email service requiring authentication
Make it public! 2024-03-16 08:40:24 +00:00			`PORT=8000`

Build + offer docker image and docker-compose.yml file for easier self-hosting Tweak login and auth for IP-based setups and setups without email enabled. 2024-04-09 12:22:05 +00:00			`POSTGRESQL_HOST="postgresql" # docker container name or external hostname/IP`
Make it public! 2024-03-16 08:40:24 +00:00			`POSTGRESQL_USER="postgres"`
			`POSTGRESQL_PASSWORD="fake"`
Update .env.sample 2024-03-18 08:16:30 +00:00			`POSTGRESQL_DBNAME="bewcloud"`
Make it public! 2024-03-16 08:40:24 +00:00			`POSTGRESQL_PORT=5432`
			`POSTGRESQL_CAFILE=""`

			`JWT_SECRET="fake"`
			`PASSWORD_SALT="fake"`

Add Optional 2FA Support (#61) * Add TOTP MFA Support * Add Passkey MFA Support It's not impossible I missed some minor cleanup, but most things make sense and there isn't a lot of obvious duplication anymore. --------- Co-authored-by: Bruno Bernardino <me@brunobernardino.com> 2025-05-29 16:30:28 +00:00			`MFA_KEY="fake" # optional, if you want to enable multi-factor authentication`
			`MFA_SALT="fake" # optional, if you want to enable multi-factor authentication`

Implement (optional) SSO via OIDC (OpenID Connect) (#64) This implements optional SSO via OIDC for logging in and signing up (for the first admin sign up or if sign up is allowed). The most requested feature! Tested with Authentik and Google! It includes a new `SimpleCache` interface (in-memory, using [`caches`](https://developer.mozilla.org/en-US/docs/Web/API/Window/caches)) for storing the state and code challenges. Closes #13 2025-06-05 17:10:40 +00:00			`OIDC_CLIENT_ID="fake" # optional, if you want to enable SSO (Single Sign-On)`
			`OIDC_CLIENT_SECRET="fake" # optional, if you want to enable SSO (Single Sign-On)`

Expose new `tlsMode` and `tlsVerify` options for connecting to the mail submission agent (#134) * Expose new `tlsMode` and `tlsVerify` options for connecting to the mail submission agent * Make `tlsVerify` default to opportunistic StartTLS on ports other than 465 to prevent breaking change --------- Co-authored-by: Bruno Bernardino <me@brunobernardino.com> 2025-12-20 11:50:15 +00:00			`#SMTP_USERNAME="" # optional, if you want to use signup email verification or multi-factor with an email service requiring authentication`
			`#SMTP_PASSWORD="" # optional, if you want to use signup email verification or multi-factor with an email service requiring authentication`