Add verified email API key signup

2026-06-29 20:35:16 -07:00
parent 49a6541b24
commit cf8af6d936
15 changed files with 783 additions and 32 deletions
@@ -53,6 +53,12 @@ RATE_LIMIT_PER_MINUTE=60
 SIGNUP_ENABLED=true                          # optional: public API-key minting
 SIGNUP_RATE_LIMIT_PER_HOUR=3
 DEFAULT_SIGNUP_KEY_RATE_LIMIT=30
+SIGNUP_DIRECT_ENABLED=false                  # recommended once verified email is configured
+RESEND_API_KEY=re_...
+SIGNUP_FROM_EMAIL=Ditto <hello@ditto.site>   # must be a verified Resend sender/domain
+SIGNUP_VERIFY_URL=https://ditto.site/api-key
+SIGNUP_TOKEN_TTL_MINUTES=30
+SIGNUP_CORS_ORIGINS=https://ditto.site       # browser origins allowed to call signup routes
 # SSRF is on by default; do NOT set SSRF_ALLOW_LOOPBACK in prod.
 ```