- Update configuration for production HTTPS domain (devden.hiddenden.cafe) - Add nginx reverse proxy for /api and /auth routes to backend - Create auth-callback.html to handle Microsoft Entra ID OAuth redirect - Fix API_URL in script.js to use same origin (remove :8000 port) - Add cache-busting query parameter (?v=2) to script.js - Update .env.example with HTTPS requirements documentation This resolves Azure Entra ID redirect URI mismatch and enables proper OAuth authentication flow through the nginx frontend proxy. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
33 lines
1.1 KiB
Plaintext
33 lines
1.1 KiB
Plaintext
# AI Provider API Keys
|
|
# Get Claude API key from: https://console.anthropic.com/
|
|
ANTHROPIC_API_KEY=your_anthropic_api_key_here
|
|
|
|
# Get OpenAI API key from: https://platform.openai.com/api-keys
|
|
OPENAI_API_KEY=your_openai_api_key_here
|
|
|
|
# Provider Settings
|
|
DEFAULT_PROVIDER=claude
|
|
CLAUDE_MODEL=claude-3-5-sonnet-20241022
|
|
OPENAI_MODEL=gpt-4o-mini
|
|
|
|
# API Configuration
|
|
MAX_TOKENS=4000
|
|
TEMPERATURE=0.7
|
|
# For local development use: http://localhost:3000
|
|
# For production use your domain with HTTPS: https://your-domain.com
|
|
FRONTEND_URL=http://localhost:3000
|
|
|
|
# Microsoft Entra ID (Azure AD)
|
|
# Create an app registration at: https://portal.azure.com/#view/Microsoft_AAD_RegisteredApps
|
|
# IMPORTANT: Azure requires HTTPS for non-localhost redirect URIs
|
|
# For localhost: http://localhost:3000/auth/callback
|
|
# For production: https://your-domain.com/auth/callback
|
|
ENTRA_TENANT_ID=your-tenant-id
|
|
ENTRA_CLIENT_ID=your-client-id
|
|
ENTRA_CLIENT_SECRET=your-client-secret
|
|
ENTRA_REDIRECT_URI=http://localhost:3000/auth/callback
|
|
|
|
# JWT Configuration
|
|
JWT_SECRET=change-this-to-a-secure-random-string
|
|
JWT_EXPIRY_HOURS=24
|