This repository has no description
2configs/omnigent: give CLI sessions a week-long TTL
author
lassulus
date
(Aug 14, 2026, 11:47 AM CEST)
commit
686df0db
686df0db2d2b32ef227ed6ac95b4377572788981
parent
9766c9d4
9766c9d42b578248281aec74d6154f6bacaf05e5
+6
+6
2configs/omnigent.nix
+6
2configs/omnigent.nix
···
120
120
# (signups are disabled) and the domain allowlist above still applies, so
121
121
# the marker carries no information for us.
122
122
OMNIGENT_OIDC_SKIP_EMAIL_VERIFICATION = "1";
123
+
# Default is 8 hours, which expires the `s covibe` session JWT roughly
124
+
# once a working day and forces a browser round-trip through pocket-id.
125
+
# A week is the pragmatic setting for a single-operator host behind an
126
+
# invite-less IdP; the tokens live 0600 in ~/.omnigent/auth_tokens.json,
127
+
# so shorten this if a laptop ever leaves the house untrusted.
128
+
OMNIGENT_OIDC_SESSION_TTL_HOURS = "168";
123
129
OMNIGENT_ADMIN_LIST_PATH = "${admins}";
124
130
# The wheel checks PyPI for updates on every start otherwise.
125
131
OMNIGENT_NO_UPDATE_CHECK = "1";