mirror of
https://github.com/HyPnoTiiK/stream-fusion.git
synced 2026-07-28 07:02:09 +00:00
7755a78842
- Implement Fernet encryption for configuration URLs to protect sensitive user settings - Add CONFIG_SECRET_KEY environment variable for key derivation - Add server-side /api/config/encode endpoint for secure config token generation - Add CSRF token generation and validation for all admin POST routes - Auto-inject CSRF tokens into admin forms and AJAX requests via JavaScript - Update frontend to use async server encoding instead of client-side Base64 - Add localStorage fallback for config restoration on /configure pages - Maintain backward compatibility with existing Base64-encoded URLs - Log warning at startup if CONFIG_SECRET_KEY is not configured - Convert debug logs to trace level in TorrentSmartContainer for reduced noise
27 lines
No EOL
811 B
Bash
27 lines
No EOL
811 B
Bash
# This file is an example of the .env file that should be created in the root of the project
|
|
|
|
# StreamFusion
|
|
SECRET_API_KEY='superkey_that_can_be_changed'
|
|
CONFIG_SECRET_KEY='changez-ce-secret-par-une-valeur-longue-et-aleatoire' # Requis pour le chiffrement Fernet des URLs de configuration
|
|
TMDB_API_KEY='<REDATED>'
|
|
REDIS_HOST='stremio-redis'
|
|
PG_HOST='stremio-postgres'
|
|
JACKETT_API_KEY='<REDATED>' # Optional
|
|
RD_TOKEN='<REDATED>' # Optional
|
|
AD_TOKEN='<REDATED>' # Optional
|
|
YGG_PASSKEY='<REDATED>' # Optional
|
|
SHAREWOOD_PASSKEY='<REDATED>' # Optional
|
|
USE_HTTPS=True
|
|
TZ='Europe/London'
|
|
|
|
# Zilean
|
|
ZILEAN_DB_CONNECTION_STRING=Host=stremio-postgres;Port=5432;Database=zilean;Username=stremio;Password=stremio
|
|
|
|
# Postgres
|
|
POSTGRES_USER=stremio
|
|
POSTGRES_PASSWORD=stremio
|
|
POSTGRES_DB=zilean
|
|
|
|
# Jackett
|
|
PUID=1000
|
|
PGID=1000 |