Add default administrator user and authentication configuration options.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 705f2157-ef97-4fbd-89e4-8c7f2ecaea90
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/7ed01c5f-a82d-405a-b728-b2e3d127c60c/2dd1a20c-f467-4f7c-915f-c7b9ad6f9965.jpg

.env.example

@@ -28,3 +28,28 @@ RATE_LIMIT_MAX_REQUESTS=1000
 
 # Logging
 LOG_LEVEL=info
+
+# Default Admin User Configuration
+DEFAULT_ADMIN_USERNAME=admin
+DEFAULT_ADMIN_PASSWORD=password
+DEFAULT_ADMIN_EMAIL=admin@example.com
+DEFAULT_ADMIN_FULLNAME=System Administrator
+DISABLE_REGISTRATION=false
+
+# LDAP Authentication Configuration (Optional)
+# LDAP_SERVER=ldap.example.com
+# LDAP_PORT=389
+# LDAP_USE_TLS=true
+# LDAP_BIND_DN=cn=admin,dc=example,dc=com
+# LDAP_BIND_PASSWORD=admin_password
+# LDAP_SEARCH_BASE=dc=example,dc=com
+# LDAP_SEARCH_FILTER=(uid={{username}})
+
+# OpenID Connect Authentication Configuration (Optional)
+# OIDC_ISSUER=https://accounts.google.com
+# OIDC_AUTHORIZATION_URL=https://accounts.google.com/o/oauth2/v2/auth
+# OIDC_TOKEN_URL=https://oauth2.googleapis.com/token
+# OIDC_USERINFO_URL=https://openidconnect.googleapis.com/v1/userinfo
+# OIDC_CLIENT_ID=your_client_id
+# OIDC_CLIENT_SECRET=your_client_secret
+# OIDC_CALLBACK_URL=http://localhost:5000/api/auth/oidc/callback

Dockerfile

@@ -25,6 +25,18 @@ WORKDIR /app
 ENV NODE_ENV=production
 ENV PORT=5000
 
+# Authentication environment variables
+ENV JWT_SECRET=change-this-in-production
+ENV SESSION_SECRET=change-this-in-production
+ENV DEFAULT_ADMIN_USERNAME=admin
+ENV DEFAULT_ADMIN_PASSWORD=password
+ENV DEFAULT_ADMIN_EMAIL=
+ENV DEFAULT_ADMIN_FULLNAME="System Administrator"
+ENV DISABLE_REGISTRATION=false
+
+# Database configuration
+ENV DATABASE_URL=postgres://postgres:postgres@postgres:5432/admgr
+
 # Copy package files
 COPY package*.json ./
 

docker-compose.yml

@@ -13,6 +13,12 @@ services:
       - DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}
       - REDIS_URL=redis://redis:6379
       - SESSION_SECRET=${SESSION_SECRET}
+      - JWT_SECRET=${JWT_SECRET}
+      - DEFAULT_ADMIN_USERNAME=${DEFAULT_ADMIN_USERNAME:-admin}
+      - DEFAULT_ADMIN_PASSWORD=${DEFAULT_ADMIN_PASSWORD:-password}
+      - DEFAULT_ADMIN_EMAIL=${DEFAULT_ADMIN_EMAIL}
+      - DEFAULT_ADMIN_FULLNAME=${DEFAULT_ADMIN_FULLNAME:-System Administrator}
+      - DISABLE_REGISTRATION=${DISABLE_REGISTRATION:-false}
     depends_on:
       - postgres
       - redis