fix: do not provide default token secrets

twentyhq · Mar 21, 2024 · 8288224 · 8288224
1 parent 071a611
commit 8288224
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/packages/twenty-docker/prod/.env.example b/packages/twenty-docker/prod/.env.example
@@ -8,7 +8,9 @@ SERVER_URL=http://localhost:3000
 # Uncoment if you are serving your front on another server than the API (eg. bucket)
 # FRONT_BASE_URL=http://localhost:3000
 
-ACCESS_TOKEN_SECRET=replace_me_with_a_random_string_access
-LOGIN_TOKEN_SECRET=replace_me_with_a_random_string_login
-REFRESH_TOKEN_SECRET=replace_me_with_a_random_string_refresh
+# Use openssl rand -base64 32 for each secret
+# ACCESS_TOKEN_SECRET=replace_me_with_a_random_string_access
+# LOGIN_TOKEN_SECRET=replace_me_with_a_random_string_login
+# REFRESH_TOKEN_SECRET=replace_me_with_a_random_string_refresh
+
 SIGN_IN_PREFILLED=true