forked from claude-did-this/claude-hub
a71cdcad40
This comprehensive update adds support for Claude Max subscription authentication and improves the overall authentication system with multiple methods: 🔐 Claude Authentication Enhancements: - Add setup container method for Claude Max/20x subscription usage ($20-200/month) - Create interactive authentication script (setup-claude-interactive.sh) - Add authentication testing utility (test-claude-auth.sh) - Support three authentication methods: Setup Container, API Key, AWS Bedrock - Comprehensive authentication documentation 📁 Directory Configuration: - Add CLAUDE_HUB_DIR environment variable (default: ~/.claude-hub) - Update .gitignore to use .claude-hub/ instead of hardcoded paths - Consistent environment variable usage across all scripts 🐙 GitHub Token Support: - Add fine-grained GitHub token support (github_pat_) alongside classic tokens (ghp_) - Update token validation in claudeService and githubService - Enhanced token detection and authentication flow 📖 Documentation & Guides: - Add complete Claude Authentication Guide with all three methods - Add Setup Container Deep Dive documentation - Update CLAUDE.md with quick start authentication section - Comprehensive cost comparison and use case recommendations 🐳 Container & Docker Improvements: - Update Dockerfile.claudecode with proper entrypoint script copying - Add Dockerfile.claude-setup for interactive authentication - Update docker-compose.yml with new port (3003) and environment variables - Enhanced container volume mounting for authentication 🔧 Infrastructure Updates: - Add TRUST_PROXY configuration for reverse proxy environments - Update port configuration from 3002 to 3003 - Enhanced environment variable documentation in .env.example - Debug utilities for troubleshooting authentication issues This update enables Claude Max subscribers to use their existing subscriptions for automation, potentially saving thousands in API costs while maintaining full production capabilities. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
88 lines
2.8 KiB
Plaintext
88 lines
2.8 KiB
Plaintext
# Application Configuration
|
|
NODE_ENV=development
|
|
PORT=3002
|
|
|
|
# Trust Proxy Configuration
|
|
# Set to 'true' when running behind reverse proxies (nginx, cloudflare, etc.)
|
|
# This allows proper handling of X-Forwarded-For headers for rate limiting
|
|
TRUST_PROXY=false
|
|
|
|
# ============================
|
|
# SECRETS CONFIGURATION
|
|
# ============================
|
|
# The application supports two methods for providing secrets:
|
|
#
|
|
# 1. Environment Variables (shown below) - Convenient for development
|
|
# 2. Secret Files - More secure for production
|
|
#
|
|
# If both are provided, SECRET FILES TAKE PRIORITY over environment variables.
|
|
#
|
|
# For file-based secrets, the app looks for files at:
|
|
# - /run/secrets/github_token (or path in GITHUB_TOKEN_FILE)
|
|
# - /run/secrets/anthropic_api_key (or path in ANTHROPIC_API_KEY_FILE)
|
|
# - /run/secrets/webhook_secret (or path in GITHUB_WEBHOOK_SECRET_FILE)
|
|
#
|
|
# To use file-based secrets in development:
|
|
# 1. Create a secrets directory: mkdir secrets
|
|
# 2. Add secret files: echo "your-secret" > secrets/github_token.txt
|
|
# 3. Mount in docker-compose or use GITHUB_TOKEN_FILE=/path/to/secret
|
|
# ============================
|
|
|
|
# GitHub Webhook Settings
|
|
GITHUB_WEBHOOK_SECRET=your_webhook_secret_here
|
|
GITHUB_TOKEN=ghp_your_github_token_here
|
|
|
|
# Bot Configuration (REQUIRED)
|
|
BOT_USERNAME=@ClaudeBot
|
|
BOT_EMAIL=claude@example.com
|
|
|
|
# Security Configuration
|
|
AUTHORIZED_USERS=admin,username2,username3
|
|
DEFAULT_AUTHORIZED_USER=admin
|
|
|
|
# Default GitHub Configuration for CLI
|
|
DEFAULT_GITHUB_OWNER=your-org
|
|
DEFAULT_GITHUB_USER=your-username
|
|
DEFAULT_BRANCH=main
|
|
|
|
# Claude API Settings
|
|
ANTHROPIC_API_KEY=your_anthropic_api_key_here
|
|
|
|
# Claude Hub Directory
|
|
# Directory where Claude Hub stores configuration, authentication, and database files (default: ~/.claude-hub)
|
|
CLAUDE_HUB_DIR=/home/user/.claude-hub
|
|
|
|
# Container Settings
|
|
CLAUDE_USE_CONTAINERS=1
|
|
CLAUDE_CONTAINER_IMAGE=claudecode:latest
|
|
REPO_CACHE_DIR=/tmp/repo-cache
|
|
REPO_CACHE_MAX_AGE_MS=3600000
|
|
CONTAINER_LIFETIME_MS=7200000 # Container execution timeout in milliseconds (default: 2 hours)
|
|
|
|
# AWS Bedrock Credentials for Claude (if using Bedrock)
|
|
AWS_ACCESS_KEY_ID=your_aws_access_key_id
|
|
AWS_SECRET_ACCESS_KEY=your_aws_secret_access_key
|
|
AWS_REGION=us-east-1
|
|
CLAUDE_CODE_USE_BEDROCK=1
|
|
ANTHROPIC_MODEL=us.anthropic.claude-3-7-sonnet-20250219-v1:0
|
|
|
|
# AWS Profile (uncomment if using AWS profiles instead of direct credentials)
|
|
# USE_AWS_PROFILE=true
|
|
# AWS_PROFILE=claude-webhook
|
|
|
|
|
|
# Container Capabilities (optional)
|
|
CLAUDE_CONTAINER_CAP_NET_RAW=true
|
|
CLAUDE_CONTAINER_CAP_SYS_TIME=false
|
|
CLAUDE_CONTAINER_CAP_DAC_OVERRIDE=true
|
|
CLAUDE_CONTAINER_CAP_AUDIT_WRITE=true
|
|
|
|
# PR Review Configuration
|
|
PR_REVIEW_WAIT_FOR_ALL_CHECKS=true
|
|
PR_REVIEW_TRIGGER_WORKFLOW=Pull Request CI
|
|
PR_REVIEW_DEBOUNCE_MS=5000
|
|
PR_REVIEW_MAX_WAIT_MS=1800000
|
|
PR_REVIEW_CONDITIONAL_TIMEOUT_MS=300000
|
|
|
|
# Test Configuration
|
|
TEST_REPO_FULL_NAME=owner/repo |