chore(config): move hardcoded secrets to environment variables

2026-05-18 15:40:55 +07:00
parent dee6a56140
commit f697ef16cd
7 changed files with 141 additions and 59 deletions
@@ -0,0 +1,35 @@
+# ===================================================
+# Profile: prod (production)
+# Aktifkan dengan: --spring.profiles.active=prod
+# Semua nilai WAJIB diisi via environment variable
+# Tidak ada default value — akan gagal start jika kosong
+# ===================================================
+
+spring:
+  datasource:
+    url: ${DB_URL}
+    username: ${DB_USERNAME}
+    password: ${DB_PASSWORD}
+
+  jpa:
+    show-sql: false
+    properties:
+      hibernate:
+        format_sql: false
+
+server:
+  port: ${PORT:8080}
+
+jwt:
+  secret: ${JWT_SECRET}
+  expiration: ${JWT_EXPIRATION:86400000}
+
+agora:
+  app-id: ${AGORA_APP_ID}
+  app-certificate: ${AGORA_APP_CERTIFICATE}
+
+logging:
+  level:
+    com.walkguide: INFO
+    org.springframework.messaging: WARN
+    org.springframework.web.socket: WARN