The dev config uses http://localhost:8080 (plain HTTP), but both session cookies had secure: true, which tells browsers to only send cookies over HTTPS. This caused a sign-in loop where authentication succeeded but the browser dropped the cookie, redirecting back to login. This change sets secure: false for both cookie configurations in the dev config only. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Emily Moir <emi@emimoir.com>
144 lines
3.6 KiB
YAML
144 lines
3.6 KiB
YAML
unit:
|
|
metrics:
|
|
addr: "localhost:8081"
|
|
tracing:
|
|
addr: "localhost:4317"
|
|
max-batch-size: 512
|
|
batch-timeout: 1
|
|
export-timeout: 1
|
|
max-queue-size: 2048
|
|
|
|
probod:
|
|
base-url: "http://localhost:8080"
|
|
encryption-key: "thisisnotasecretAAAAAAAAAAAAAAAAAAAAAAAAAAA="
|
|
chrome-dp-addr: "localhost:9222"
|
|
|
|
trust-center:
|
|
http-addr: ":8085"
|
|
https-addr: ":8443"
|
|
|
|
api:
|
|
addr: "localhost:8080"
|
|
cors:
|
|
allowed-origins:
|
|
- "http://localhost:8080"
|
|
- "http://localhost:5173"
|
|
- "http://localhost:5174"
|
|
|
|
pg:
|
|
addr: "localhost:5432"
|
|
username: "postgres"
|
|
password: "postgres"
|
|
database: "probod"
|
|
pool-size: 100
|
|
|
|
auth:
|
|
disable-signup: false
|
|
invitation-confirmation-token-validity: 3600
|
|
cookie:
|
|
name: "SSID"
|
|
domain: "localhost"
|
|
secret: "this-is-a-secure-secret-for-cookie-signing-at-least-32-bytes"
|
|
duration: 24
|
|
secure: false
|
|
password:
|
|
pepper: "this-is-a-secure-pepper-for-password-hashing-at-least-32-bytes"
|
|
iterations: 1000000
|
|
|
|
aws:
|
|
region: "us-east-1"
|
|
bucket: "probod"
|
|
access-key-id: "probod"
|
|
secret-access-key: "thisisnotasecret"
|
|
endpoint: "http://127.0.0.1:8333"
|
|
|
|
notifications:
|
|
mailer:
|
|
sender-name: "Probo"
|
|
sender-email: "no-reply@notification.getprobo.com"
|
|
smtp:
|
|
addr: "localhost:1025"
|
|
tls-required: false
|
|
mailer-interval: 60
|
|
slack:
|
|
sender-interval: 60
|
|
|
|
llm:
|
|
providers:
|
|
openai:
|
|
type: openai
|
|
api-key: "thisisnotasecret"
|
|
defaults:
|
|
provider: openai
|
|
model-name: gpt-4o
|
|
temperature: 0.1
|
|
max-tokens: 4096
|
|
|
|
evidence-describer:
|
|
interval: 10
|
|
stale-after: 300
|
|
max-concurrency: 10
|
|
|
|
custom-domains:
|
|
renewal-interval: 3600
|
|
provision-interval: 30
|
|
cname-target: "custom.getprobo.com"
|
|
acme:
|
|
directory: "https://localhost:14000/dir"
|
|
email: "admin@getprobo.com"
|
|
key-type: "EC256"
|
|
|
|
connectors:
|
|
- provider: "SLACK"
|
|
protocol: "oauth2"
|
|
config:
|
|
client-id: "your-slack-client-id"
|
|
client-secret: "your-slack-client-secret"
|
|
settings:
|
|
signing-secret: "your-slack-signing-secret"
|
|
- provider: "GOOGLE_WORKSPACE"
|
|
protocol: "oauth2"
|
|
config:
|
|
client-id: "your-google-client-id.apps.googleusercontent.com"
|
|
client-secret: "your-google-client-secret"
|
|
- provider: "LINEAR"
|
|
protocol: "oauth2"
|
|
config:
|
|
client-id: "your-linear-client-id"
|
|
client-secret: "your-linear-client-secret"
|
|
- provider: "BREX"
|
|
protocol: "oauth2"
|
|
config:
|
|
client-id: "your-brex-client-id"
|
|
client-secret: "your-brex-client-secret"
|
|
- provider: "HUBSPOT"
|
|
protocol: "oauth2"
|
|
config:
|
|
client-id: "your-hubspot-client-id"
|
|
client-secret: "your-hubspot-client-secret"
|
|
- provider: "DOCUSIGN"
|
|
protocol: "oauth2"
|
|
config:
|
|
client-id: "your-docusign-client-id"
|
|
client-secret: "your-docusign-client-secret"
|
|
- provider: "NOTION"
|
|
protocol: "oauth2"
|
|
config:
|
|
client-id: "your-notion-client-id"
|
|
client-secret: "your-notion-client-secret"
|
|
- provider: "GITHUB"
|
|
protocol: "oauth2"
|
|
config:
|
|
client-id: "your-github-client-id"
|
|
client-secret: "your-github-client-secret"
|
|
- provider: "SENTRY"
|
|
protocol: "oauth2"
|
|
config:
|
|
client-id: "your-sentry-client-id"
|
|
client-secret: "your-sentry-client-secret"
|
|
- provider: "INTERCOM"
|
|
protocol: "oauth2"
|
|
config:
|
|
client-id: "your-intercom-client-id"
|
|
client-secret: "your-intercom-client-secret"
|