jhodgkin/lisilou-portfolio
1
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases Wiki Activity

Prod (CT111) api/.env is a blank template — no admin login, notifications, calendar, or SSO #16

New Issue
Open
opened 2026-07-19 22:16:32 -06:00 by jhodgkin · 1 comment
jhodgkin commented 2026-07-19 22:16:32 -06:00
Owner
Copy Link
Copy Source

The GitHub-driven prod deploy auto-creates api/.env from .env.example, which is why the stack runs at all — but every secret is empty. Until real values are set on CT111 at /opt/lisilou-portfolio/api/.env:

  • admin dashboard login is disabled (no ADMIN_SECRET)
  • new bookings send no n8n notification — real clients could book silently
  • calendar availability shows all dates free (no Google creds)
  • SSO/client portal sign-in is inactive (no OIDC_* / SESSION_SECRET)

Fix: copy working values from CT114 /opt/…/api/.env (adjust SITE_URL / CORS_ORIGIN to https://lisilou.jerodrigged.com), then docker compose restart api. Depends on Authentik setup (see the Authentik provider/groups issue) for the OIDC_* values.

Migrated from docs/BACKLOG-2026-07-16.md (B2).

The GitHub-driven prod deploy auto-creates `api/.env` from `.env.example`, which is why the stack runs at all — but every secret is empty. Until real values are set on CT111 at `/opt/lisilou-portfolio/api/.env`: - admin dashboard login is disabled (no `ADMIN_SECRET`) - **new bookings send no n8n notification — real clients could book silently** - calendar availability shows all dates free (no Google creds) - SSO/client portal sign-in is inactive (no `OIDC_*` / `SESSION_SECRET`) **Fix:** copy working values from CT114 `/opt/…/api/.env` (adjust `SITE_URL` / `CORS_ORIGIN` to `https://lisilou.jerodrigged.com`), then `docker compose restart api`. Depends on Authentik setup (see the Authentik provider/groups issue) for the `OIDC_*` values. Migrated from `docs/BACKLOG-2026-07-16.md` (B2).
jhodgkin commented 2026-07-20 00:33:28 -06:00
Author
Owner
Copy Link
Copy Source

Partial progress 2026-07-20: OIDC_* + SESSION_SECRET are now filled in and verified working on prod (see #12/#17), as part of completing the Authentik setup. Still open: ADMIN_SECRET, N8N_WEBHOOK_URL, GOOGLE_SERVICE_ACCOUNT_JSON, and SITE_URL/CORS_ORIGIN (still pointing at CT114's LAN IP). Left these alone deliberately - they need real values from Jerod, not placeholders.

Partial progress 2026-07-20: OIDC_* + SESSION_SECRET are now filled in and verified working on prod (see #12/#17), as part of completing the Authentik setup. Still open: ADMIN_SECRET, N8N_WEBHOOK_URL, GOOGLE_SERVICE_ACCOUNT_JSON, and SITE_URL/CORS_ORIGIN (still pointing at CT114's LAN IP). Left these alone deliberately - they need real values from Jerod, not placeholders.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jhodgkin
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: jhodgkin/lisilou-portfolio#16
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?