docs: drop JWT_EXPIRY from .env.example, docker-compose, README (family TTL is canonical)
This commit is contained in:
@@ -60,7 +60,6 @@ docker compose run --rm register-user --username alice --password secret
|
||||
| Variable | Default | Description |
|
||||
|---|---|---|
|
||||
| `JWT_SECRET` | *(required)* | Secret key for signing JWTs |
|
||||
| `JWT_EXPIRY` | `7d` | JWT token lifetime |
|
||||
| `PORT` | `3000` | Port to listen on |
|
||||
| `HOST` | `0.0.0.0` | Host to bind |
|
||||
| `BASE_URL` | `http://localhost:3000` | Public base URL (used in share links) |
|
||||
@@ -71,6 +70,8 @@ docker compose run --rm register-user --username alice --password secret
|
||||
| `COOKIE_SECURE` | `false` | Set `true` when serving over HTTPS |
|
||||
| `TRUST_PROXY` | `false` | Set `true` when behind a reverse proxy |
|
||||
|
||||
Session lifetime is family-pinned to 30 days with sliding renewal (see `src/constants.ts`). Not configurable per deployment.
|
||||
|
||||
### Reverse proxy
|
||||
|
||||
Set `TRUST_PROXY=true` when running behind a reverse proxy so Nanodrop sees the real client IP in logs.
|
||||
|
||||
Reference in New Issue
Block a user