Without a stable secret, better-auth generates a random one per process,
which invalidates every session cookie and JWKS private key on redeploy
and across multi-instance deployments. Make it a required env var and
wire it into betterAuth({ secret }) explicitly so missing config fails
fast at boot instead of silently rotating keys.
19 lines
385 B
Bash
19 lines
385 B
Bash
DATABASE_URL="postgresql://postgres:example-PAssw0rd-xHjDYR.b7N@db:5432/postgres"
|
|
REDIS_URL="redis://localhost:6379"
|
|
|
|
BETTER_AUTH_SECRET=""
|
|
|
|
AUTH_GOOGLE_CLIENT_ID=""
|
|
AUTH_GOOGLE_CLIENT_SECRET=""
|
|
|
|
AUTH_GITHUB_CLIENT_ID=""
|
|
AUTH_GITHUB_CLIENT_SECRET=""
|
|
|
|
STRIPE_SECRET_KEY=""
|
|
STRIPE_WEBHOOK_SECRET=""
|
|
|
|
CLIENT_URL=""
|
|
API_SERVER_URL=""
|
|
|
|
# OTEL_EXPORTER_OTLP_ENDPOINT="http://localhost:4318"
|