mirror of
https://github.com/djdevin/recflare.git
synced 2026-09-08 14:41:28 -07:00
devin
339a91735b
* turnstile * require turnstile * homepage refresh * implemented rooms visited endpoint for friends * update default profile pic * add a meta download button * add subroom permissions * enable signup
80 lines
4.7 KiB
Bash
80 lines
4.7 KiB
Bash
# Base domain all service hosts are derived from, e.g. accounts.<domain>.
|
|
RECFLARE_DOMAIN=rec.example.com
|
|
|
|
# Optional per-app subdomain overrides, as a compact JSON object keyed by the
|
|
# worker's directory name. Defaults to the directory name when unset.
|
|
# RECFLARE_SUBDOMAINS='{"playersettings":"settings"}'
|
|
|
|
# Id of the shared `recflare` D1 database (create it manually with
|
|
# `wrangler d1 create recflare`). All D1-backed workers bind this one database.
|
|
# Kept out of the committed wrangler.jsonc (which uses a "local" placeholder) and
|
|
# spliced in at deploy time. Required to deploy any worker that uses D1.
|
|
# RECFLARE_D1=d44083e1-5bfe-4467-aa9a-f13c5c2496d5
|
|
|
|
# KV namespace ids, as a compact JSON object keyed by binding name. Each namespace
|
|
# is distinct (create with `wrangler kv namespace create <BINDING>`). Kept out of
|
|
# the committed wrangler.jsonc (which uses "local" placeholders) and spliced in at
|
|
# deploy time. Required to deploy any worker with the matching KV binding.
|
|
# RECFLARE_KV='{"RECFLARE_MATCH_PRESENCE":"9f53f04b7dd244658d59f515a14748b6","RECFLARE_PLAYER_SETTINGS":"d33a90014e904b0eac720bddcbe0b036"}'
|
|
|
|
# Id of the shared Secrets Store that holds the `JWT_SECRET` signing key (create it
|
|
# with `wrangler secrets-store store create recflare --scopes workers`). Every
|
|
# worker binds this one store as JWT_SECRET so auth-signed tokens verify everywhere.
|
|
# Kept out of the committed wrangler.jsonc (which uses a "local" placeholder) and
|
|
# spliced in at deploy time. Required to deploy any worker.
|
|
# RECFLARE_SECRETS_STORE=00000000-0000-0000-0000-000000000000
|
|
|
|
# --- Server tuning (all optional; the shown value is the built-in default) ---
|
|
# Everything below is passed to the workers as a variable, named without the RECFLARE_
|
|
# prefix: RECFLARE_STARTING_TOKENS becomes STARTING_TOKENS. Every worker gets every knob —
|
|
# the ones that don't read a knob just ignore it — so nothing here has to be routed to a
|
|
# particular service, and two services reading the same knob agree on it for free. (The five
|
|
# settings above are the exception: they configure the deploy itself, not the workers.)
|
|
#
|
|
# The same values are used by `just deploy` and by `just dev`, so a knob is set in exactly
|
|
# one place. Change one and re-deploy the worker that reads it (e.g. `just deploy -F auth`)
|
|
# for it to take effect. Leave a line commented out and the worker uses its built-in
|
|
# default — and deleting a line you'd set really does restore that default on the next
|
|
# deploy.
|
|
#
|
|
# Don't set these in the Cloudflare dashboard — a deploy replaces a worker's variables
|
|
# wholesale, so a dashboard-set value is wiped by your next `just deploy`. This file is the
|
|
# durable place. (Actual secrets don't go here either: they live in the Cloudflare Secrets
|
|
# Store, like the shared JWT signing key above.)
|
|
|
|
# How many accounts one signup source may create (`auth`). Enforced on signup only,
|
|
# never on login: an existing account always stays reachable. Set either to 0 to turn
|
|
# that cap off entirely.
|
|
# ...PER_PLATFORM_ID counts accounts per Steam-verified identity — unspoofable.
|
|
# ...PER_IP counts accounts per signup IP — coarse, since a household, NAT or campus
|
|
# network shares one address. This is the one to raise (or zero out) if real players
|
|
# report being locked out.
|
|
# RECFLARE_MAX_ACCOUNTS_PER_PLATFORM_ID=3
|
|
# RECFLARE_MAX_ACCOUNTS_PER_IP=3
|
|
|
|
# How many rooms one account may create (`rooms`) and how many clubs (`clubs`).
|
|
# Enforced on creation only — lowering either never touches what players already have,
|
|
# it just stops new ones. Set either to 0 to turn that cap off.
|
|
# ...ROOMS counts rooms the account created, minus their auto-provisioned dorm.
|
|
# ...CLUBS counts clubs the account created (subscription clubs don't count).
|
|
# RECFLARE_MAX_ROOMS_PER_ACCOUNT=10
|
|
# RECFLARE_MAX_CLUBS_PER_ACCOUNT=10
|
|
|
|
# RecCenterTokens a new player is granted, the first time their balance is read (`econ`).
|
|
# 0 means players start broke. Applies only to players who haven't been granted yet —
|
|
# raising it later does NOT top up existing players.
|
|
# RECFLARE_STARTING_TOKENS=10000
|
|
|
|
# Signup on the website is configured OUTSIDE this file: it's guarded by a Cloudflare
|
|
# Turnstile widget, and both of that widget's keys live in the shared Secrets Store
|
|
# (RECFLARE_SECRETS_STORE above), alongside JWT_SECRET — not as vars, not as worker secrets.
|
|
#
|
|
# wrangler secrets-store secret create <store-id> --name TURNSTILE_SITE_KEY \
|
|
# --scopes workers --remote
|
|
# wrangler secrets-store secret create <store-id> --name TURNSTILE_SECRET_KEY \
|
|
# --scopes workers --remote
|
|
#
|
|
# Setting them both is what opens web signup; with either missing it stays closed. See
|
|
# DEPLOYING.md. Accounts are still created by the game either way, and both `auth` account
|
|
# caps above apply regardless.
|