Update .env.example

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

.env.example

@@ -7,11 +7,13 @@ ADDRESS=0.0.0.0
 GC_INTERVAL=10
 GC_ENABLED=true
 MULTIPART_RETENTION_HOURS=24
-AUTH_ENABLED=true
+AUTH_ENABLED=false
 AUTH_REGION=us-east-1
 AUTH_SKEW_SECONDS=300
 AUTH_MAX_PRESIGN_SECONDS=86400
-AUTH_MASTER_KEY=
+# When AUTH_ENABLED=true you MUST set AUTH_MASTER_KEY to a strong random value, e.g.:
+#   openssl rand -base64 32
+AUTH_MASTER_KEY=REPLACE_WITH_SECURE_RANDOM_KEY
 AUTH_BOOTSTRAP_ACCESS_KEY=
 AUTH_BOOTSTRAP_SECRET_KEY=
 AUTH_BOOTSTRAP_POLICY=

README.md

@@ -40,7 +40,7 @@ Required when `AUTH_ENABLED=true`:
 - `AUTH_MASTER_KEY` must be base64 for 32 decoded bytes (AES-256 key), e.g. `openssl rand -base64 32`
 - `AUTH_BOOTSTRAP_ACCESS_KEY` and `AUTH_BOOTSTRAP_SECRET_KEY` define initial credentials
 
-Reference: `docs/auth-spec.md`
+Reference: `auth/README.md`
 
 Health:
 - `GET /healthz`