From 09ddd483e85f0a74a71fe7e97acc82e91abec93e Mon Sep 17 00:00:00 2001 From: Haksung Jang Date: Thu, 3 Sep 2026 11:34:05 +0900 Subject: [PATCH] Wire auth/account/permission env vars into compose 9 vars documented in .env.example (self-registration policy, default team role, API-key bookkeeping, permission cache TTL, password-reset and refresh-token retention grace) were never referenced in x-backend-env, so setting them in .env had no effect on the running container. Adds them with defaults matching core/config.py exactly. Part of the compose env-var wiring audit. --- docker-compose.dev.yml | 15 +++++++++++++++ docker-compose.yml | 15 +++++++++++++++ 2 files changed, 30 insertions(+) diff --git a/docker-compose.dev.yml b/docker-compose.dev.yml index 06b10add..815267e5 100644 --- a/docker-compose.dev.yml +++ b/docker-compose.dev.yml @@ -289,6 +289,21 @@ x-backend-env: &backend-env TOOLCHAIN_CACHE_IDLE_SECONDS: ${TOOLCHAIN_CACHE_IDLE_SECONDS:-900} TOOLCHAIN_CACHE_MAX_BYTES: ${TOOLCHAIN_CACHE_MAX_BYTES:-8589934592} TOOLCHAIN_CACHE_ROOTS: ${TOOLCHAIN_CACHE_ROOTS:-} + # compose-env-var wiring audit: self-registration policy, default team + # role, API-key bookkeeping, and permission/token retention. Documented in + # .env.example but never listed in this anchor, so setting any of them in + # .env had no effect on the running container. Defaults match + # core/config.py exactly, so an unset .env changes nothing for an existing + # deployment. + API_KEY_LAST_USED_AT_UPDATE_INTERVAL_SECONDS: ${API_KEY_LAST_USED_AT_UPDATE_INTERVAL_SECONDS:-900} + API_KEY_VERIFICATION_MIN_DURATION_SECONDS: ${API_KEY_VERIFICATION_MIN_DURATION_SECONDS:-0.22} + AUTH_AUTO_REGISTER: ${AUTH_AUTO_REGISTER:-false} + AUTH_REGISTER_CREATES_TEAM: ${AUTH_REGISTER_CREATES_TEAM:-true} + AUTH_SELF_REGISTRATION: ${AUTH_SELF_REGISTRATION:-true} + DEFAULT_MEMBER_ROLE: ${DEFAULT_MEMBER_ROLE:-} + PERMISSION_CACHE_TTL_SECONDS: ${PERMISSION_CACHE_TTL_SECONDS:-} + PASSWORD_RESET_TOKEN_RETENTION_GRACE_DAYS: ${PASSWORD_RESET_TOKEN_RETENTION_GRACE_DAYS:-1} + REFRESH_TOKEN_RETENTION_GRACE_DAYS: ${REFRESH_TOKEN_RETENTION_GRACE_DAYS:-1} services: postgres: diff --git a/docker-compose.yml b/docker-compose.yml index 02dd1063..c06ff21a 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -383,6 +383,21 @@ x-backend-env: &backend-env TOOLCHAIN_CACHE_IDLE_SECONDS: ${TOOLCHAIN_CACHE_IDLE_SECONDS:-900} TOOLCHAIN_CACHE_MAX_BYTES: ${TOOLCHAIN_CACHE_MAX_BYTES:-8589934592} TOOLCHAIN_CACHE_ROOTS: ${TOOLCHAIN_CACHE_ROOTS:-} + # compose-env-var wiring audit: self-registration policy, default team + # role, API-key bookkeeping, and permission/token retention. Documented in + # .env.example but never listed in this anchor, so setting any of them in + # .env had no effect on the running container. Defaults match + # core/config.py exactly, so an unset .env changes nothing for an existing + # deployment. + API_KEY_LAST_USED_AT_UPDATE_INTERVAL_SECONDS: ${API_KEY_LAST_USED_AT_UPDATE_INTERVAL_SECONDS:-900} + API_KEY_VERIFICATION_MIN_DURATION_SECONDS: ${API_KEY_VERIFICATION_MIN_DURATION_SECONDS:-0.22} + AUTH_AUTO_REGISTER: ${AUTH_AUTO_REGISTER:-false} + AUTH_REGISTER_CREATES_TEAM: ${AUTH_REGISTER_CREATES_TEAM:-true} + AUTH_SELF_REGISTRATION: ${AUTH_SELF_REGISTRATION:-true} + DEFAULT_MEMBER_ROLE: ${DEFAULT_MEMBER_ROLE:-} + PERMISSION_CACHE_TTL_SECONDS: ${PERMISSION_CACHE_TTL_SECONDS:-} + PASSWORD_RESET_TOKEN_RETENTION_GRACE_DAYS: ${PASSWORD_RESET_TOKEN_RETENTION_GRACE_DAYS:-1} + REFRESH_TOKEN_RETENTION_GRACE_DAYS: ${REFRESH_TOKEN_RETENTION_GRACE_DAYS:-1} services: # ---------------------------------------------------------------------------