#GOTRUE_SITE_URL: ${SITE_URL}
SITE_URL=http://localhost:3000

const defaultInviteMail = `<h2>You have been invited</h2>

<p>You have been invited to create a user on {{ .SiteURL }}. Follow this link to accept the invite:</p>
<p><a href="{{ .ConfirmationURL }}">Accept the invite</a></p>
<p>Alternatively, enter the code: {{ .Token }}</p>`

func (a *API) getExternalRedirectURL(r *http.Request) string {
	ctx := r.Context()
	config := a.config
	if config.External.RedirectURL != "" {
		return config.External.RedirectURL
	}
	if er := getExternalReferrer(ctx); er != "" {
		return er
	}
	return config.SiteURL
}

#GOTRUE_URI_ALLOW_LIST: ${ADDITIONAL_REDIRECT_URLS}
ADDITIONAL_REDIRECT_URLS=“http://localhost:3000/auth/*”

# Whether this external provider is enabled or not
EXTERNAL_X_ENABLED = true

#The OAuth2 Client ID registered with the external provider.
EXTERNAL_X_CLIENT_ID = <your-client-ID>

# The OAuth2 Client Secret provided by the external provider when you registered.
EXTERNAL_X_SECRET = <your-secret>

# The URI a OAuth2 provider will redirect to with the code and state values.
# The redirect url is usually https://<domain pointing to port 8000>.com/auth/v1/callback
EXTERNAL_X_REDIRECT_URI = <your-redirect-url>

# Github OAuth config in auth.enviroment
GOTRUE_EXTERNAL_GITHUB_ENABLED: true
GOTRUE_EXTERNAL_GITHUB_CLIENT_ID: ${GITHUB_CLIENT_ID}
GOTRUE_EXTERNAL_GITHUB_SECRET: ${GITHUB_CLIENT_SECRET}
GOTRUE_EXTERNAL_GITHUB_REDIRECT_URI: ${AUTH_REDIRECT_URL}


# env
## Providers github, applying method can be found in official documentation
GITHUB_CLIENT_ID="xxx"
GITHUB_CLIENT_SECRET="xxx"
# callback address during oauth authorization callback. 
AUTH_REDIRECT_URL="http://localhost:8000/auth/v1/callback"

curl 'https://<PROJECT_REF>.supabase.co/auth/v1/settings' \
-H "apikey: <ANON_KEY>" \
-H "Authorization: Bearer <ANON_KEY>"

const defaultRecoveryMail = `<h2>Reset password</h2>

<p>Follow this link to reset the password for your user:</p>
<p><a href="{{ .ConfirmationURL }}">Reset password</a></p>
<p>Alternatively, enter the code: {{ .Token }}</p>`

#URL path to an email template to use when resetting a password. (e.g. `https://www.example.com/path-to-email-template.html`).`SiteURL`, `Email`, and `ConfirmationURL` variables are available.
GOTRUE_MAILER_TEMPLATES_RECOVERY="https://www.example.com/path-to-email-template.html"

<h2>Reset My Password</h2>

<p>Follow this link to reset the password bro:</p>
<p><a href="{{ .SiteURL }}/auth/confirm?token_hash={{ .TokenHash }}&type=recovery&next={{ .RedirectTo }}">Reset Password</a></p>

SMTP_ADMIN_EMAIL=
SMTP_HOST=
SMTP_PORT=
SMTP_USER=
SMTP_PASS=
SMTP_SENDER_NAME=

# pre-require: 配置acme环境

# 腾讯云的生成方式
acme.sh --issue --dns dns_tencent -d example.com

# install
acme.sh --install-cert -d auth.goroutine.cn \
 --key-file       /xxx/supabase-docker/volumes/ssl/example.key.pem  \
 --fullchain-file /xxx/supabase-docker/volumes/ssl/example.cert.pem


# make readable
chmod a+x /xxx/supabase-docker/volumes/ssl/example.*

# reload
sudo docker restart supabase-kong