app/.env.example
kcar 0d76868a42 security: remove VITE_TLSYNC_SECRET from frontend bundle
- Remove import.meta.env.VITE_TLSYNC_SECRET from syncService.ts
- Add optional token parameter to SyncConnectionOptions interface
  (caller passes token fetched from API, not a baked-in secret)
- Add clientEnvBlocklist in vite.config.ts to prevent sensitive VITE_
  env vars (TLSYNC_SECRET, MICROSOFT_CLIENT_SECRET*) from reaching bundle
- Remove VITE_TLSYNC_SECRET from .env.example
- Token auth for TLSync now handled server-side or via API endpoint

Ref: t_99d166c6
2026-05-28 13:51:46 +01:00

53 lines
2.2 KiB
Plaintext

# Classroom Copilot App - Environment Variables Template
# Copy this file to .env and fill in the values
# =============================================================================
# Frontend Configuration
# =============================================================================
VITE_APP_NAME=Classroom Copilot
VITE_DEV=false
VITE_FRONTEND_SITE_URL=https://app.classroomcopilot.ai
VITE_PORT_FRONTEND=3000
VITE_PORT_FRONTEND_HMR=24678
VITE_APP_HMR_URL=http://localhost:24678
# =============================================================================
# API Configuration
# =============================================================================
VITE_API_URL=https://api.classroomcopilot.ai
VITE_API_BASE=https://api.classroomcopilot.ai
# =============================================================================
# Supabase Configuration
# =============================================================================
VITE_SUPABASE_URL=https://your-project.supabase.co
VITE_SUPABASE_ANON_KEY=your-supabase-anon-key
# =============================================================================
# TLSync (TLDraw Sync) Configuration
# =============================================================================
VITE_TLSYNC_URL=https://app.classroomcopilot.ai/tldraw
# =============================================================================
# WhisperLive (Transcription) Configuration
# =============================================================================
VITE_WHISPERLIVE_URL=wss://whisperlive.classroomcopilot.ai/ws
# =============================================================================
# Search Configuration
# =============================================================================
VITE_SEARCH_URL=https://search.kevlarai.com
# =============================================================================
# Super Admin Configuration
# =============================================================================
VITE_SUPER_ADMIN_EMAIL=admin@example.com
# =============================================================================
# Port Configuration (for docker-compose)
# =============================================================================
PORT_FRONTEND=3000
PORT_FRONTEND_HMR=24678
PORT_API=8000
PORT_SUPABASE=8000