PhilandClaude Opus 5.5
a08402f0ac
Karakeep had DISABLE_SIGNUPS unset, so anyone could make an account on bookmarks. and use the OpenAI key behind it. The server also had no automatic updates and three security updates waiting; the common role now installs unattended-upgrades with Debian's default security-only origins. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
12 lines
624 B
Django/Jinja
12 lines
624 B
Django/Jinja
KARAKEEP_VERSION=release
|
|
NEXTAUTH_SECRET={{ vault_hoarder.nextauth_secret }}
|
|
MEILI_MASTER_KEY={{ vault_hoarder.meili_master_key }}
|
|
NEXTAUTH_URL=https://{{ subdomains.bookmarks }}
|
|
OPENAI_API_KEY={{ vault_infrastructure.openai_api_key }}
|
|
OAUTH_CLIENT_SECRET={{ vault_hoarder.pocketid.client_secret }}
|
|
OAUTH_CLIENT_ID={{ vault_hoarder.pocketid.client_id }}
|
|
OAUTH_PROVIDER_NAME=Pocket ID
|
|
OAUTH_WELLKNOWN_URL=https://{{ subdomains.pocketid }}/.well-known/openid-configuration
|
|
OAUTH_ALLOW_DANGEROUS_EMAIL_ACCOUNT_LINKING=false
|
|
# Karakeep allows open signups unless this is set. Unset it briefly to add a user.
|
|
DISABLE_SIGNUPS=true |