feat: enforce production pricing provider config

2026-09-10 01:46:58 -04:00
parent f837324cf5
commit 4f0e3d89f6
6 changed files with 66 additions and 4 deletions
@@ -30,7 +30,10 @@ keeps database and Redis ports internal to the Compose network.
 Before starting, create a production `.env` containing real values for
 `POSTGRES_DB`, `POSTGRES_USER`, `POSTGRES_PASSWORD`, `DATABASE_URL`,
 `REDIS_URL`, `SMTP_URL`, `SMTP_FROM`, and a stable base64-encoded 32-byte
-`MFA_ENCRYPTION_KEY`. Do not use the fixture pricing provider in production.
+`MFA_ENCRYPTION_KEY`. Set `PRICING_HTTP_PROVIDER_ENDPOINT` to the approved
+provider's HTTPS endpoint and provide its token through
+`PRICING_HTTP_PROVIDER_TOKEN` when required. Production startup rejects the
+fixture provider, missing endpoints, and non-HTTPS endpoints.

 Start the stack and apply migrations with: