SEC-16: Add frontend ports mapping (80:80) to docker-compose.yml UI-01: Add routes for Welcome, SettingsIntegrations, MealPlan in App.jsx SEC-01: Remove traceback leak from auth error responses SEC-02: Fix require_admin to use is_admin column (was undefined ADMIN_USERNAME) SEC-03: Add API_TOKEN auth for MCP connector -> backend communication SEC-04: OAuth state now uses signed JWT tokens (was raw user UUID) OS-01: First registered user gets admin immediately during registration 10 files changed, 97 insertions(+), 25 deletions(-)
19 lines
651 B
Text
19 lines
651 B
Text
# === REQUIRED (generated automatically by setup.sh) ===
|
|
SECRET_KEY=
|
|
API_TOKEN=
|
|
|
|
# === APP URL (change for production) ===
|
|
BASE_URL=http://localhost
|
|
|
|
# === DATABASE (defaults work out of the box) ===
|
|
DB_USER=fitness
|
|
DB_NAME=fitness_rewards
|
|
|
|
# === MCP AGENT AUTH (generated automatically by setup.sh) ===
|
|
# The API_TOKEN authenticates the MCP connector with the backend.
|
|
# It is auto-configured — you don't need to touch it unless you're
|
|
# connecting an agent from outside Docker.
|
|
|
|
# Everything else — Strava, Polar, Garmin, Fitbit, Telegram,
|
|
# USDA, Groq, etc. — is configured through the app UI or your AI agent.
|
|
# No container restart needed.
|