From ccf9b857857829327b0e952cb9e983862c953663 Mon Sep 17 00:00:00 2001 From: JOY Date: Sat, 12 Sep 2026 12:56:47 +0000 Subject: [PATCH] fix(build): declare fork env vars in turbo globalEnv so they reach the runtime Turbo 2.x defaults to strict env mode, which only forwards variables listed in globalEnv to the task process. Every fork-added variable was missing, so the next-server process saw them as undefined even though docker exec printenv showed them set. That silently disabled DOS.Me SSO (the provider gate never passed), the Brevo and Crove CRM sync webhooks (isConfigured false), the dos-org-sync webhook (secret unset, so it failed closed), and made the new TLS and SSRF opt-out flags unreadable. Declares the OIDC, CROVE_, BREVO_, DOS_, webhook-secret, DATABASE_SSL_REJECT_UNAUTHORIZED, SSRF_ALLOW_PRIVATE_IPS and NEXT_PUBLIC_DOS_ID_LOGIN_ENABLED variables. --- turbo.json | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/turbo.json b/turbo.json index 78d1a1131ff..b70da9ee949 100644 --- a/turbo.json +++ b/turbo.json @@ -38,6 +38,21 @@ "CRON_API_KEY", "CRON_SECRET", "CRON_ENABLE_APP_SYNC", + "BREVO_API_KEY", + "BREVO_WEBHOOK_SECRET", + "CROVE_BREVO_API_KEY", + "CROVE_CAL_DOS_WEBHOOK_SECRET", + "CROVE_CRM_API_KEY", + "CROVE_CRM_API_URL", + "CROVE_CRM_WEBHOOK_SECRET", + "CROVE_OAUTH_CLIENT_SECRET", + "DATABASE_SSL_REJECT_UNAUTHORIZED", + "DOS_SYNC_WEBHOOK_SECRET", + "NEXT_PUBLIC_DOS_ID_LOGIN_ENABLED", + "OIDC_CLIENT_ID", + "OIDC_CLIENT_SECRET", + "OIDC_WELL_KNOWN_URL", + "SSRF_ALLOW_PRIVATE_IPS", "CLOUDFLARE_TURNSTILE_SECRET", "DAILY_API_KEY", "DAILY_SCALE_PLAN",