From d724a92d34a7e2e63175ecf6ff10e30cb8f872ea Mon Sep 17 00:00:00 2001
From: Fusion <noreply@runfusion.ai>
Date: Mon, 18 May 2026 22:56:04 +0200
Subject: [PATCH] docs: update env and docker-compose for session-based auth

- Replace JWT config with SESSION_SECRET and SESSION_TTL_HOURS
- Remove AUTHENTIK_JWKS_URL, ISSUER, AUDIENCE (no longer needed)
- Update docker-compose.traefik.yml environment variables
---
 .env.example               | 10 +++-------
 docker-compose.traefik.yml |  6 ++----
 2 files changed, 5 insertions(+), 11 deletions(-)

diff --git a/.env.example b/.env.example
index ebf32dc..a78b05f 100644
--- a/.env.example
+++ b/.env.example
@@ -6,10 +6,9 @@ POSTGRES_DB=headquarter
 # Redis Configuration
 REDIS_URL=redis://redis:6379/0
 
-# JWT Configuration
-JWT_SECRET=change-me-in-production
-JWT_ALGORITHM=HS256
-JWT_EXPIRATION_HOURS=24
+# Session Configuration
+SESSION_SECRET=change-me-in-production
+SESSION_TTL_HOURS=24
 
 # Application Configuration
 APP_ENV=development
@@ -37,9 +36,6 @@ AUTHENTIK_APPLICATION_SLUG=headquarter-web
 # Override Authentik URLs if they differ from the default pattern
 # AUTHENTIK_AUTHORIZE_URL=https://authentik.example.com/application/o/authorize/
 # AUTHENTIK_TOKEN_URL=https://authentik.example.com/application/o/token/
-# AUTHENTIK_JWKS_URL=https://authentik.example.com/application/o/headquarter-web/jwks/
-# AUTHENTIK_ISSUER=https://authentik.example.com/application/o/headquarter-web/
-AUTHENTIK_AUDIENCE=headquarter-web
 
 # Frontend Configuration
 VITE_API_BASE_URL=http://localhost:8000
diff --git a/docker-compose.traefik.yml b/docker-compose.traefik.yml
index 65a11f6..9348009 100644
--- a/docker-compose.traefik.yml
+++ b/docker-compose.traefik.yml
@@ -77,7 +77,8 @@ services:
       POSTGRES_HOST: postgres
       POSTGRES_PORT: 5432
       REDIS_URL: redis://redis:6379/0
-      JWT_SECRET: ${JWT_SECRET:-change-me-in-production}
+      SESSION_SECRET: ${SESSION_SECRET:-change-me-in-production}
+      SESSION_TTL_HOURS: ${SESSION_TTL_HOURS:-24}
       REPO_BASE_PATH: /data/repos
       API_DOMAIN: ${API_DOMAIN}
       WEB_DOMAIN: ${WEB_DOMAIN}
@@ -89,9 +90,6 @@ services:
       AUTHENTIK_APPLICATION_SLUG: ${AUTHENTIK_APPLICATION_SLUG:-headquarter-web}
       AUTHENTIK_AUTHORIZE_URL: ${AUTHENTIK_AUTHORIZE_URL:-}
       AUTHENTIK_TOKEN_URL: ${AUTHENTIK_TOKEN_URL:-}
-      AUTHENTIK_JWKS_URL: ${AUTHENTIK_JWKS_URL:-}
-      AUTHENTIK_ISSUER: ${AUTHENTIK_ISSUER:-}
-      AUTHENTIK_AUDIENCE: ${AUTHENTIK_AUDIENCE:-headquarter-web}
     volumes:
       - repo_data:/data/repos
       - avatar_uploads:/app/uploads