Read-only demo boards, per-IP rate limits, opaque voter sessions, session leave, upload sniffing, path containment, and retire /v1.
14 lines
574 B
Bash
14 lines
574 B
Bash
# Copy to .env for local run / deploy host (never commit real tokens).
|
|
# Optional: bootstraps a "Family" board that legacy ?invite= links can resolve.
|
|
STORK_INVITE_TOKEN=change-me-long-random
|
|
STORK_ADMIN_TOKEN=change-me-admin-random
|
|
STORK_COOKIE_SECURE=false
|
|
STORK_DATA=./data
|
|
# STORK_PUBLIC_URL=https://stork.levkin.ca
|
|
# Comma-separated board ids that reject member mutations (public demo).
|
|
# STORK_READONLY_BOARD_IDS=b_gS0LlZHm-lk
|
|
# Optional rate-limit overrides (per IP / hour):
|
|
# STORK_RL_BOARDS_PER_HOUR=5
|
|
# STORK_RL_SESSIONS_PER_HOUR=60
|
|
# STORK_RL_UPLOADS_PER_HOUR=30
|