.

2025-10-16 19:49:50 +00:00
parent ba6b4fef4f
commit c4097bc737
119 changed files with 3765 additions and 14390 deletions
@@ -1,62 +1,54 @@
-# ===== Runtime =====
+# =======================================================
+# Runtime
 NODE_ENV=development
 PORT=3030
+APP_BASE_URL=https://dev.suitecoffee.uy
+# =======================================================


-# ===== Session (usa el Redis del stack) =====
-# Para DEV podemos reutilizar el Redis de Authentik. En prod conviene uno separado.
-SESSION_SECRET=Neon*Mammal*Boaster*Ludicrous*Fender8*Crablike
-SESSION_COOKIE_NAME=sc.sid
-
-# ===== DB principal (metadatos de SuiteCoffee) =====
-# Usa el alias de red del servicio 'db' (compose: aliases [dev-db])
-DB_HOST=dev-db
-DB_NAME=dev_suitecoffee_core
-DB_PORT=5432
-DB_USER=dev-user-suitecoffee
-DB_PASS=dev-pass-suitecoffee

+# =======================================================
+# Configuración de Dases de Datos
 CORE_DB_HOST=dev-db
 CORE_DB_NAME=dev_suitecoffee_core
 CORE_DB_PORT=5432
 CORE_DB_USER=dev-user-suitecoffee
 CORE_DB_PASS=dev-pass-suitecoffee

-# ===== DB tenants (Tenants de SuiteCoffee) =====
-TENANTS_HOST=dev-tenants
-TENANTS_DB=dev_suitecoffee_tenants
-TENANTS_PORT=5432
-TENANTS_USER=suitecoffee
-TENANTS_PASS=suitecoffee
-
 TENANTS_DB_HOST=dev-tenants
 TENANTS_DB_NAME=dev_suitecoffee_tenants
 TENANTS_DB_PORT=5432
 TENANTS_DB_USER=suitecoffee
 TENANTS_DB_PASS=suitecoffee
+# =======================================================


-# ===== Authentik — Admin API (server-to-server dentro de la red) =====
-# Usa el alias de red del servicio 'authentik' y su puerto interno 9000
+
+# =======================================================
+# Sesiones 
+SESSION_SECRET=Neon*Mammal*Boaster*Ludicrous*Fender8*Crablike
+SESSION_NAME=sc.sid
+# COOKIE_DOMAIN=dev.suitecoffee.uy
+# =======================================================
+
+
+
+# =======================================================
+# Authentik y OIDC
 AK_TOKEN=h2apVHbd3ApMcnnSwfQPXbvximkvP8HnUE25ot3zXWuEEtJFaNCcOzDHB6Xw
 AK_REDIS_URL=redis://ak-redis:6379

-# ===== OIDC (DEBE coincidir con el Provider) =====
-# DEV (todo dentro de la red de Docker):
-# - El auth service redirige al navegador a este issuer. Si NO tenés reverse proxy hacia Authentik,
-#   esta URL interna NO será accesible desde el navegador del host. En ese caso, ver nota más abajo.
-
-APP_BASE_URL=https://suitecoffee.uy
-
 OIDC_LOGIN_URL=https://sso.suitecoffee.uy
-OIDC_REDIRECT_URI = https://suitecoffee.uy/auth/callback
+OIDC_REDIRECT_URI=https://suitecoffee.uy/auth/callback
+
+OIDC_CLIENT_ID=1orMM8vOvf3WkN2FejXYvUFpPtONG0Lx1eMlwIpW
+OIDC_CLIENT_SECRET=t5wx13qBcM0EFQ3cGnUIAmLzvbdsQrUVPv1OGWjszWkEp35pJQ55t7vZeeShqG49kuRAaiXv6PSGJLhRfGaponGaJl8gH1uCL7KIxdmm7UihgYoAXB2dFhZV4zRxfze2

-OIDC_CLIEN_ID=1orMM8vOvf3WkN2FejXYvUFpPtONG0Lx1eMlwIpW
 OIDC_CONFIG_URL=https://sso.suitecoffee.uy/application/o/suitecoffee/.well-known/openid-configuration
-OIDC_ISSUER=https://sso.suitecoffee.uy/application/o/suitecoffee/
-OIDC_ISSUER_DISCOVERY=https://sso.suitecoffee.uy/application/o/suitecoffee/.well-known/openid-configuration
 OIDC_AUTHORIZE_URL=https://sso.suitecoffee.uy/application/o/authorize/
 OIDC_TOKEN_URL=https://sso.suitecoffee.uy/application/o/token/
 OIDC_USERINFO_URL=https://sso.suitecoffee.uy/application/o/userinfo/
 OIDC_LOGOUT_URL=https://sso.suitecoffee.uy/application/o/suitecoffee/end-session/
-OIDC_JWKS_URL=https://sso.suitecoffee.uy/application/o/suitecoffee/jwks/
+OIDC_JWKS_URL=https://sso.suitecoffee.uy/application/o/suitecoffee/jwks/
+
+# =======================================================