04d0f4b123
* feat: support standard AWS env vars and default credential chain Replace non-standard AWS_ACCESS_KEY / AWS_SECRET_KEY with the AWS-standard AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY. The old names are kept as fallbacks in the runtimeEnv for backward compatibility. Both vars are now optional. When omitted, the credentials object is not passed to SESv2Client, STSClient, or SNSClient — the AWS SDK then falls back to its default provider chain (IAM roles, ECS task roles, instance profiles, etc.), which is the recommended approach for cloud-native deployments. Closes #316 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * refactor: extract shared getAwsCredentialOptions helper and add partial-config guard - Move the credential spread logic into a single credentials.ts helper so SESv2Client, STSClient, and SNSClient all share one implementation - Throw a clear error if only one of AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY is set, preventing silent fallback to the default provider chain with a half-configured environment Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: align AWS env vars in docker and docs * fix: use alias import for AWS credentials helper --------- Co-authored-by: purva <purvahk08@gmail.com> Co-authored-by: Purva Kandalgaonkar <136103488+purva-8@users.noreply.github.com>
46 lines
1.2 KiB
Bash
46 lines
1.2 KiB
Bash
# Redis container name - required
|
|
REDIS_URL="redis://redis:6379"
|
|
|
|
# Postgres - required for docker-compose, not needed for just docker
|
|
POSTGRES_USER="postgres"
|
|
POSTGRES_PASSWORD="postgres"
|
|
POSTGRES_DB="usesend"
|
|
# Postgres - required
|
|
DATABASE_URL="postgresql://postgres:postgres@postgres:5432/usesend"
|
|
|
|
# NextAuth - required
|
|
NEXTAUTH_URL="http://localhost:3000"
|
|
NEXTAUTH_SECRET=
|
|
|
|
#SMTP
|
|
SMTP_HOST=smtp.mailtrap.io # Example SMTP host
|
|
SMTP_USER= "usesend" # Example SMTP user
|
|
|
|
## Auth providers any one is required
|
|
# GitHub login - required
|
|
GITHUB_ID="<your-github-client-id>"
|
|
GITHUB_SECRET="<your-github-client-secret>"
|
|
|
|
# Google login - required
|
|
GOOGLE_CLIENT_ID="<your-google-client-id>"
|
|
GOOGLE_CLIENT_SECRET="<your-google-client-secret>"
|
|
|
|
# AWS details
|
|
# Provide static credentials OR rely on the AWS default credential chain
|
|
# (IAM role, ECS task role, instance profile, etc.) by omitting these vars.
|
|
AWS_DEFAULT_REGION="us-east-1"
|
|
AWS_ACCESS_KEY_ID="<your-aws-access-key-id>"
|
|
AWS_SECRET_ACCESS_KEY="<your-aws-secret-access-key>"
|
|
|
|
|
|
|
|
DOCKER_OUTPUT=1
|
|
API_RATE_LIMIT=1
|
|
AUTH_EMAIL_RATE_LIMIT=5
|
|
|
|
# Optional: prefix all Redis keys (useful for shared Redis with ACL isolation)
|
|
# REDIS_KEY_PREFIX=""
|
|
|
|
# used to send important error notification - optional
|
|
DISCORD_WEBHOOK_URL=""
|