elixir/sample.env

Rama main · réplica de lectura del repositorio original.

# Copy this to .env (or your env system of choice) and fill in the missing values below

# These are safe to commit
GOOGLE_OIDC_CLIENT_ID=681146968633-u6niq7rvkrkg9gsiugc3g9qopusvmrfa.apps.googleusercontent.com
GOOGLE_SYNC_AUTHZ_CLIENT_ID=1045866283770-50g056snl4a3sdruk5t340iakbmonc2c.apps.googleusercontent.com
ENTRA_OIDC_CLIENT_ID=a52b1a5c-b0b7-4f27-b84c-57d77296abcb
ENTRA_TENANT_ID=52e801b2-c10e-42e6-9c36-4cb95f3353d5
ENTRA_SYNC_CLIENT_ID=46b4b676-cb16-480c-9347-7f841d2eebfb
INTUNE_SYNC_CLIENT_ID=aee6d4c4-f351-40c8-9439-49aed7dbdd79
SENTINEL_SYNC_CLIENT_ID=ca0b0135-9b68-4f69-8e1b-db3d9fe91068

# Find this in the Engineering Vault
GOOGLE_SERVICE_ACCOUNT_KEY=

# Set this to your Google OAuth id, from the 'sub' field
GOOGLE_IDP_ID=

# Set this to your Entra OID
ENTRA_IDP_ID=

# Check 1Pass Vault for these
GOOGLE_OIDC_CLIENT_SECRET=
GOOGLE_SYNC_AUTHZ_CLIENT_SECRET=
ENTRA_OIDC_CLIENT_SECRET=
ENTRA_SYNC_CLIENT_SECRET=
INTUNE_SYNC_CLIENT_SECRET=

# Find this in the Engineering Vault
SENTINEL_SYNC_CLIENT_SECRET=

# Optional: AWS credentials for testing Amazon S3 log sinks, plus the
# account id they belong to (shown in the trust policy on the setup form).
# For Identity Center credentials: eval "$(aws configure export-credentials
# --format env)" and copy the AWS_* values into these.
LOG_SINKS_AWS_ACCESS_KEY_ID=
LOG_SINKS_AWS_SECRET_ACCESS_KEY=
LOG_SINKS_AWS_SESSION_TOKEN=
LOG_SINKS_AWS_ACCOUNT_ID=

# Optional: recipient for emails to the Firezone team (production runtime setting):
# portal feedback, sign-up questionnaires, deletion feedback, Enterprise seat overage.
# Not sent when unset or blank.
# FEEDBACK_EMAIL_RECIPIENT=support@firezone.dev

# Optional: recipient for posture provider interest and feedback.
# Disabled when unset or blank (production runtime setting).
# POSTURE_PROVIDER_INTEREST_EMAIL_RECIPIENT=engineering@firezone.dev