cccb3123ed
- Add Redis-based sliding window rate limiting on login, register, forgot-password, reset-password - Fix user enumeration: register returns generic 200 for both new and existing emails - Add Redis authentication (requirepass) and password in .env - Docker network isolation: postgres/redis on internal-only network - Whitelist Stripe redirect origins (prevent open redirect) - Add 10MB request size limit on trace ingestion - Limit API keys to 10 per user - Add CORS headers via middleware (whitelist agentlens.vectry.tech + localhost) - Reduce JWT max age from 30 days to 7 days
20 lines
566 B
Plaintext
20 lines
566 B
Plaintext
# Authentication
|
|
AUTH_SECRET= # Generate with: openssl rand -base64 32
|
|
|
|
# Stripe
|
|
STRIPE_SECRET_KEY= # sk_live_... or sk_test_...
|
|
STRIPE_WEBHOOK_SECRET= # whsec_...
|
|
STRIPE_STARTER_PRICE_ID=price_1SzJUlR8i0An4Wz7gZeYgzBY
|
|
STRIPE_PRO_PRICE_ID=price_1SzJVWR8i0An4Wz755hBrxzn
|
|
|
|
# Database (optional — defaults to agentlens/agentlens/agentlens)
|
|
POSTGRES_USER=agentlens
|
|
POSTGRES_PASSWORD=
|
|
POSTGRES_DB=agentlens
|
|
|
|
# Redis
|
|
REDIS_PASSWORD= # Generate with: openssl rand -base64 24
|
|
|
|
# Email (optional — email features disabled if not set)
|
|
EMAIL_PASSWORD=
|