From 14c75a8942c66b3a50c0adcd3fcc43d97165da32 Mon Sep 17 00:00:00 2001
From: aiyimickey <39365912+aiyimickey@users.noreply.github.com>
Date: Fri, 3 Jul 2026 14:01:38 +0800
Subject: [PATCH] =?UTF-8?q?chore:=20.env.example=20=E7=BB=9F=E4=B8=80?=
 =?UTF-8?q?=E4=B8=BA=E6=9C=AC=E5=9C=B0=E5=BC=80=E5=8F=91=E9=85=8D=E7=BD=AE?=
 =?UTF-8?q?=EF=BC=88JWT=5FSECRET/AUTHELIA=5FURL/COOKIE=5FDOMAIN=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .env.example | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/.env.example b/.env.example
index 45e380c..8ec3e83 100644
--- a/.env.example
+++ b/.env.example
@@ -1,15 +1,14 @@
-# OA 门户环境变量
+# OA 门户环境变量（本地开发）
 LDAP_URL=ldap://localhost:3890
 LDAP_BASE_DN=dc=tlyq,dc=ai
 LDAP_ADMIN_DN=uid=admin,ou=people,dc=tlyq,dc=ai
-JWT_SECRET=change-me-same-across-all-sites
+JWT_SECRET=dev-jwt-secret-local
 COOKIE_DOMAIN=
 NODE_ENV=development
-# ⚠️ 仅限本地开发环境（自签名证书），生产环境禁止设置此变量
 NODE_TLS_REJECT_UNAUTHORIZED=0
 
-# OIDC 配置（SSO 统一认证）
-AUTHELIA_URL=https://sso.tlyq.ai
+# OIDC 配置
+AUTHELIA_URL=http://127.0.0.1:6180
 OIDC_CLIENT_ID=oa-oidc
-OIDC_CLIENT_SECRET=change-me-to-hashed-secret
-OIDC_REDIRECT_URI=http://localhost:6179/api/auth/callback
+OIDC_CLIENT_SECRET=<见 Authelia 配置>
+OIDC_REDIRECT_URI=http://127.0.0.1:6179/api/auth/callback