feat(env): add CRAWLER_SERVICE_TOKEN for crawler service login bypass

This commit is contained in:
hamed
2026-07-23 22:56:12 +03:30
parent 111c1d2981
commit e7c2c2f06e
3 changed files with 22 additions and 0 deletions
+8
View File
@@ -60,6 +60,14 @@ API_IR_TOKEN=
# Kavenegar API key is read ONLY from this env (not the DB). # Kavenegar API key is read ONLY from this env (not the DB).
KAVENEGAR_API_KEY= KAVENEGAR_API_KEY=
# ── Crawler service login (optional) ──
# Shared secret that lets the crawler / content pipeline bypass the LOGIN captcha
# only (password + rate-limit still apply). Must equal CLINICPRO_SERVICE_TOKEN on
# the crawler side. Passed to the container via docker-compose (x-app-env).
# Leave EMPTY unless ALTCHA is enabled — the compose ships ALTCHA_ENABLED=false, so
# there is no captcha to bypass. Generate with: openssl rand -hex 32
CRAWLER_SERVICE_TOKEN=
# ── Notes ── # ── Notes ──
# • Payment gateway keys (mellat/sep) are read from the DB ("Site Settings"), NOT from env. # • Payment gateway keys (mellat/sep) are read from the DB ("Site Settings"), NOT from env.
# • REFRESH_TOKEN_TTL / OTP_TTL / MAX_FILE_SIZE_BYTES are fixed in the compose file. # • REFRESH_TOKEN_TTL / OTP_TTL / MAX_FILE_SIZE_BYTES are fixed in the compose file.
+4
View File
@@ -3,3 +3,7 @@
# APP_SECRET intentionally not committed here — set it in .env.local (git-ignored). # APP_SECRET intentionally not committed here — set it in .env.local (git-ignored).
# .env.dev loads AFTER .env.local, so a value here would override the local one. # .env.dev loads AFTER .env.local, so a value here would override the local one.
###< symfony/framework-bundle ### ###< symfony/framework-bundle ###
# Crawler service login token lives in .env (CRAWLER_SERVICE_TOKEN=dev-crawler-secret-token).
# Do NOT set it here: .env.dev overrides .env, so an empty value would disable the
# dev bypass. Override only in .env.local if you need a different dev value.
+10
View File
@@ -49,6 +49,16 @@ ALLOWED_FRONTEND_HOSTS=ahvaz-nobat.ir,arak-nobat.ir,ardabil-nobat.ir,bandar-noba
API_IR_BASE_URL=https://s.api.ir API_IR_BASE_URL=https://s.api.ir
API_IR_TOKEN= API_IR_TOKEN=
# ── SMS ──
# Kavenegar API key is read ONLY from this env (not the DB).
KAVENEGAR_API_KEY=
# ── Crawler service login (optional) ──
# Shared secret that lets the crawler / content pipeline bypass the LOGIN captcha
# only. Must equal CLINICPRO_SERVICE_TOKEN on the crawler side. Leave EMPTY unless
# ALTCHA is enabled (no captcha to bypass otherwise). Generate: openssl rand -hex 32
CRAWLER_SERVICE_TOKEN=
# ── Fixed app params (same values as the compose stack) ── # ── Fixed app params (same values as the compose stack) ──
REFRESH_TOKEN_TTL=2592000 REFRESH_TOKEN_TTL=2592000
OTP_TTL=1200 OTP_TTL=1200