Files
probo/cfg/dev.yaml
Emily Moir 920e43f47f fix: set cookie secure flag to false in dev config
The dev config uses http://localhost:8080 (plain HTTP), but both session
cookies had secure: true, which tells browsers to only send cookies over
HTTPS. This caused a sign-in loop where authentication succeeded but the
browser dropped the cookie, redirecting back to login. This change sets
secure: false for both cookie configurations in the dev config only.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Emily Moir <emi@emimoir.com>
2026-04-14 16:35:34 +02:00

144 lines
3.6 KiB
YAML

unit:
metrics:
addr: "localhost:8081"
tracing:
addr: "localhost:4317"
max-batch-size: 512
batch-timeout: 1
export-timeout: 1
max-queue-size: 2048
probod:
base-url: "http://localhost:8080"
encryption-key: "thisisnotasecretAAAAAAAAAAAAAAAAAAAAAAAAAAA="
chrome-dp-addr: "localhost:9222"
trust-center:
http-addr: ":8085"
https-addr: ":8443"
api:
addr: "localhost:8080"
cors:
allowed-origins:
- "http://localhost:8080"
- "http://localhost:5173"
- "http://localhost:5174"
pg:
addr: "localhost:5432"
username: "postgres"
password: "postgres"
database: "probod"
pool-size: 100
auth:
disable-signup: false
invitation-confirmation-token-validity: 3600
cookie:
name: "SSID"
domain: "localhost"
secret: "this-is-a-secure-secret-for-cookie-signing-at-least-32-bytes"
duration: 24
secure: false
password:
pepper: "this-is-a-secure-pepper-for-password-hashing-at-least-32-bytes"
iterations: 1000000
aws:
region: "us-east-1"
bucket: "probod"
access-key-id: "probod"
secret-access-key: "thisisnotasecret"
endpoint: "http://127.0.0.1:8333"
notifications:
mailer:
sender-name: "Probo"
sender-email: "no-reply@notification.getprobo.com"
smtp:
addr: "localhost:1025"
tls-required: false
mailer-interval: 60
slack:
sender-interval: 60
llm:
providers:
openai:
type: openai
api-key: "thisisnotasecret"
defaults:
provider: openai
model-name: gpt-4o
temperature: 0.1
max-tokens: 4096
evidence-describer:
interval: 10
stale-after: 300
max-concurrency: 10
custom-domains:
renewal-interval: 3600
provision-interval: 30
cname-target: "custom.getprobo.com"
acme:
directory: "https://localhost:14000/dir"
email: "admin@getprobo.com"
key-type: "EC256"
connectors:
- provider: "SLACK"
protocol: "oauth2"
config:
client-id: "your-slack-client-id"
client-secret: "your-slack-client-secret"
settings:
signing-secret: "your-slack-signing-secret"
- provider: "GOOGLE_WORKSPACE"
protocol: "oauth2"
config:
client-id: "your-google-client-id.apps.googleusercontent.com"
client-secret: "your-google-client-secret"
- provider: "LINEAR"
protocol: "oauth2"
config:
client-id: "your-linear-client-id"
client-secret: "your-linear-client-secret"
- provider: "BREX"
protocol: "oauth2"
config:
client-id: "your-brex-client-id"
client-secret: "your-brex-client-secret"
- provider: "HUBSPOT"
protocol: "oauth2"
config:
client-id: "your-hubspot-client-id"
client-secret: "your-hubspot-client-secret"
- provider: "DOCUSIGN"
protocol: "oauth2"
config:
client-id: "your-docusign-client-id"
client-secret: "your-docusign-client-secret"
- provider: "NOTION"
protocol: "oauth2"
config:
client-id: "your-notion-client-id"
client-secret: "your-notion-client-secret"
- provider: "GITHUB"
protocol: "oauth2"
config:
client-id: "your-github-client-id"
client-secret: "your-github-client-secret"
- provider: "SENTRY"
protocol: "oauth2"
config:
client-id: "your-sentry-client-id"
client-secret: "your-sentry-client-secret"
- provider: "INTERCOM"
protocol: "oauth2"
config:
client-id: "your-intercom-client-id"
client-secret: "your-intercom-client-secret"