From 562ea93d787fc3f1a184c2e0e1b518b2230981cd Mon Sep 17 00:00:00 2001
From: Ryjek <szymon.gawlik@gmail.com>
Date: Tue, 14 Jul 2026 16:40:46 +0200
Subject: [PATCH] add jwt secret to prod env file

---
 .github/workflows/docker.yml                               | 1 +
 project/.env.prod                                          | 3 +++
 project/config/secrets/dev/dev.JWT_PASSPHRASE.0269d8.php   | 3 +++
 project/config/secrets/dev/dev.list.php                    | 1 +
 project/config/secrets/prod/prod.JWT_PASSPHRASE.0269d8.php | 3 +++
 project/config/secrets/prod/prod.list.php                  | 1 +
 6 files changed, 12 insertions(+)
 create mode 100644 project/config/secrets/dev/dev.JWT_PASSPHRASE.0269d8.php
 create mode 100644 project/config/secrets/prod/prod.JWT_PASSPHRASE.0269d8.php

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index ab7c829..48bf897 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -48,4 +48,5 @@ jobs:
             docker compose up -d backend
             docker compose exec --workdir /var/www/html backend APP_RUNTIME_ENV=prod php bin/console secrets:decrypt-to-local --force
             docker compose exec --workdir /var/www/html backend php ./bin/console doctrine:migration:migrate --dry-run
+            docker compose exec --workdir /var/www/html backend php ./bin/console lexik:jwt:generate-keypair --skip-if-exists
             docker compose exec --workdir /var/www/html backend php ./bin/console cache:clear
\ No newline at end of file
diff --git a/project/.env.prod b/project/.env.prod
index 67fac65..1efcbc4 100644
--- a/project/.env.prod
+++ b/project/.env.prod
@@ -30,3 +30,6 @@ DATABASE_URL="mysql://app:%env(DATABASE_PASSWORD)%@mysql:3306/app?serverVersion=
 #DATABASE_URL="postgresql://app:!ChangeMe!@127.0.0.1:5432/app?serverVersion=16&charset=utf8"
 ###< doctrine/doctrine-bundle ###
 REDIS_URL=redis://redis:6379?timeout=5
+JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
+JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
+JWT_PASSPHRASE=%env(JWT_PASSPHRASE)%
\ No newline at end of file
diff --git a/project/config/secrets/dev/dev.JWT_PASSPHRASE.0269d8.php b/project/config/secrets/dev/dev.JWT_PASSPHRASE.0269d8.php
new file mode 100644
index 0000000..3786540
--- /dev/null
+++ b/project/config/secrets/dev/dev.JWT_PASSPHRASE.0269d8.php
@@ -0,0 +1,3 @@
+<?php // dev.JWT_PASSPHRASE.0269d8 on Tue, 14 Jul 2026 16:39:52 +0200
+
+return "\x5D\x0FW\xCF\xA8\x28\xCDN\x8Fk\xE2\x17\xA3\x5Cd\xF7\x15\xA7KeJ\x1A\x27\xF4\x10\xEB\x1A\xFF6U\xAFx\x3C\x84\x5B\xE7\x9D\x01f\xF7\x90\xAC\xAAJ\x82\xA9\xBE\xEDBS2\x16\xA4\x95\x24\x1D\x218\xDF\xF33\x93\xB9\x9A\xAF\xB3\xE7\x02\x22\xABC\xE8\xEDM\x98\x5B\xF7\xFD\x0E\xE8s\x8D\x06\x00\x40m\x9B_\x8F\x27\xF5t3\x97\x8E\xF6y\xAA\xE0\xB7\xF4\xD67\x06\xD0Q\x0B\xFF\x90\x1A\xAC\xA1\x2B\xDA\xA2\x8F6\xF5n\x18.\xDA\x18\x1A\x18\xAC3\xE5\xA28\x9C\xE7\x09\xFF\xCC\x99\x88\x16\x83\x06\x2C\x09z\xF2\x9D\x18\xACT2\xBCqZD\xE9\x93\x96\xCF\xCC\xDDwnp\xFE\xE1o\xA9R\x21\x9B\x5E\x0F\x7C\x0B\xA4\xC9\x11\xCF";
diff --git a/project/config/secrets/dev/dev.list.php b/project/config/secrets/dev/dev.list.php
index 1eb682e..3432fb8 100644
--- a/project/config/secrets/dev/dev.list.php
+++ b/project/config/secrets/dev/dev.list.php
@@ -3,4 +3,5 @@
 return [
     'API_FAKTUROWNIA' => null,
     'DATABASE_PASSWORD' => null,
+    'JWT_PASSPHRASE' => null,
 ];
diff --git a/project/config/secrets/prod/prod.JWT_PASSPHRASE.0269d8.php b/project/config/secrets/prod/prod.JWT_PASSPHRASE.0269d8.php
new file mode 100644
index 0000000..9339a8d
--- /dev/null
+++ b/project/config/secrets/prod/prod.JWT_PASSPHRASE.0269d8.php
@@ -0,0 +1,3 @@
+<?php // prod.JWT_PASSPHRASE.0269d8 on Tue, 14 Jul 2026 16:40:05 +0200
+
+return "\xAF\xFA\xD0CAH\x1B\x27\xB0\x12\x3B\x05\x06\xF5\x18\x90q\xBCr\xE7\x2A\x830\x1A\x19\x02\x2F\xCE\x8CR\xC7\x1C\xA5V\xBA\xC0\xC3\xAC-\x83\x5D\xCB\x87~\xD1\x1E\x95\x2AY\xB8\xA1\x02\xAF\xE7\x60.\xBF\x2F\xD1\xCF3\xB1\xE3\x842\x92\x136\x91\xD1\xFC\xAD\xEE\x2FsC\xFC\x0B\x93\x8AQ\x18\x8F\x93\xBC\x00q\xA3\x93jD\xBF\x1DI\xF3\x98\x94~\x3F\x27\xBB\x9B\x84\x0B\xB0\xBDB\x19\xCC7\xDE\xCF\x2A2\x1C\xAC\x04\xB9\x86\x11\x83C\x3B\x18\xE8\xBBdQ\xC0\xA4\x15\xBCM\x28~\xF4\x0BG\x26\x5Dp\x04\xA5B\xCE\x0F\x5D~\xD8H\xC2\xBE\x18mfep\x07\x1CZ\x2C\x8B7\xBAz\x7C\xF3\x8CuY~\xB5y\xFD\x12\xC7\x9F";
diff --git a/project/config/secrets/prod/prod.list.php b/project/config/secrets/prod/prod.list.php
index ea89d44..6d2b5db 100644
--- a/project/config/secrets/prod/prod.list.php
+++ b/project/config/secrets/prod/prod.list.php
@@ -3,4 +3,5 @@
 return [
     'APP_SECRET' => null,
     'DATABASE_PASSWORD' => null,
+    'JWT_PASSPHRASE' => null,
 ];