feat: add auth env

Author: eonminion

blueprints/triggerdotdev4/docker-compose.yml

@@ -64,6 +64,26 @@ services:
       RUN_REPLICATION_LOG_LEVEL: ${RUN_REPLICATION_LOG_LEVEL:-info}
       INTERNAL_OTEL_TRACE_LOGGING_ENABLED: ${INTERNAL_OTEL_TRACE_LOGGING_ENABLED:-0}
 
+      # Add these email/SMTP variables:
+      EMAIL_TRANSPORT: ${EMAIL_TRANSPORT:-}
+      FROM_EMAIL: ${FROM_EMAIL:-}
+      REPLY_TO_EMAIL: ${REPLY_TO_EMAIL:-}
+      SMTP_HOST: ${SMTP_HOST:-}
+      SMTP_PORT: ${SMTP_PORT:-587}
+      SMTP_SECURE: ${SMTP_SECURE:-false}
+      SMTP_USER: ${SMTP_USER:-}
+      SMTP_PASSWORD: ${SMTP_PASSWORD:-}
+      
+      # If using Resend instead:
+      # RESEND_API_KEY: ${RESEND_API_KEY:-}
+      
+      # For GitHub OAuth (if needed):
+      # AUTH_GITHUB_CLIENT_ID: ${AUTH_GITHUB_CLIENT_ID:-}
+      # AUTH_GITHUB_CLIENT_SECRET: ${AUTH_GITHUB_CLIENT_SECRET:-}
+      
+      # For email whitelisting:
+      # WHITELISTED_EMAILS: ${WHITELISTED_EMAILS:-}
+
   supervisor:
     image: ghcr.io/triggerdotdev/supervisor:${TRIGGER_IMAGE_TAG:-v4-beta}
     restart: ${RESTART_POLICY:-unless-stopped}

blueprints/triggerdotdev4/template.toml

@@ -175,4 +175,29 @@ MINIO_ROOT_PASSWORD = "${minio_root_password}"
 # TRAEFIK_ENTRYPOINT = "websecure"
 # TRAEFIK_HTTP_PUBLISH_IP = "0.0.0.0"
 # TRAEFIK_HTTPS_PUBLISH_IP = "0.0.0.0"
-# TRAEFIK_DASHBOARD_PUBLISH_IP = "127.0.0.1"
+# TRAEFIK_DASHBOARD_PUBLISH_IP = "127.0.0.1"
+
+# Email Transport (options: smtp, resend, aws-ses, or leave empty to log magic links to console)
+EMAIL_TRANSPORT=
+
+# Email addresses (required if using email transport)
+FROM_EMAIL=
+REPLY_TO_EMAIL=
+
+# ---- SMTP Configuration (only if EMAIL_TRANSPORT=smtp) ----
+SMTP_HOST=
+SMTP_PORT=587
+SMTP_SECURE=false
+SMTP_USER=
+SMTP_PASSWORD=
+
+# ---- Resend Configuration (only if EMAIL_TRANSPORT=resend) ----
+RESEND_API_KEY=
+
+# ---- GitHub OAuth (optional, for GitHub login) ----
+AUTH_GITHUB_CLIENT_ID=
+AUTH_GITHUB_CLIENT_SECRET=
+
+# ---- Email Whitelisting (optional, applies to all auth methods) ----
+# Use regex pattern, e.g.: "user@example\.com|admin@company\.com"
+WHITELISTED_EMAILS=