Sam
55cd055645
All checks were successful
Build & Push / Build & Push image (push) Successful in 44s
- Updated the button for adding a new school year to have an ID for easier access. - Changed the way IS_SUPERADMIN is defined to use JSON for better compatibility. - Added event bindings for canceling and saving edits for schools in the JavaScript code. - Introduced a new document for Google SSO instructions.
48 lines
2.0 KiB
Plaintext
48 lines
2.0 KiB
Plaintext
# ================================================
|
|
# LEERDOELEN TRACKER - CONFIGURATIE
|
|
# Kopieer dit bestand naar .env en vul in
|
|
# ================================================
|
|
|
|
# Database
|
|
POSTGRES_DB=leerdoelen
|
|
POSTGRES_USER=leerdoelen
|
|
POSTGRES_PASSWORD=verander_dit_wachtwoord
|
|
|
|
# Flask
|
|
# Genereer met: python3 -c "import secrets; print(secrets.token_hex(32))"
|
|
SECRET_KEY=verander_dit_naar_een_lange_random_string
|
|
FLASK_ENV=production
|
|
|
|
# Lokale poort waarop Flask luistert (alleen bereikbaar vanaf host, niet publiek)
|
|
APP_PORT=5000
|
|
|
|
# Publieke URL (belangrijk voor OAuth2 callback!)
|
|
BASE_URL=https://leerdoelen.jouwdomain.be
|
|
|
|
# ── Microsoft Entra ID (Azure AD) ──────────────────
|
|
# Aanmaken via: https://portal.azure.com → App registrations
|
|
# Redirect URI instellen op: https://jouwdomain.be/auth/callback
|
|
# Supported account types: "Accounts in any organizational directory"
|
|
# (= multitenant, nodig omdat elke school eigen tenant heeft)
|
|
MICROSOFT_CLIENT_ID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
|
|
MICROSOFT_CLIENT_SECRET=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|
|
|
|
# ── Google Workspace SSO ───────────────────────────────────────
|
|
# Aanmaken via: https://console.cloud.google.com
|
|
# → APIs & Services → Credentials → OAuth 2.0 Client ID
|
|
# Redirect URI: https://jouwdomain.be/auth/google/callback
|
|
# Zie handleiding: docs/Handleiding_Google_SSO.md
|
|
GOOGLE_CLIENT_ID=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.apps.googleusercontent.com
|
|
GOOGLE_CLIENT_SECRET=GOCSPX-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|
|
|
|
# Naam van de scholengroep — verschijnt op de loginpagina
|
|
ORG_NAME=GO! Scholengroep 2
|
|
|
|
# Redis wachtwoord — beschermt de rate limiter state
|
|
# Genereer met: python3 -c "import secrets; print(secrets.token_hex(24))"
|
|
REDIS_PASSWORD=verander_dit_redis_wachtwoord
|
|
|
|
# Docker image uit de Gitea registry (wordt ingevuld door CI/CD)
|
|
# Lokaal builden: laat leeg of zet op 'leerdoelen-backend:local'
|
|
BACKEND_IMAGE=gitea.jouwdomein.be/jouw-org/leerdoelen-tracker:latest
|