chore(env): add AUTH_SECRET for next-auth across environments

- Add per-environment AUTH_SECRET (dev/test/prod) for next-auth v4 JWT signing
- Temporarily redirect next start stdout/stderr to LOG_FILE in post-receive hook for server error debugging

.githooks/post-receive

@@ -53,9 +53,10 @@ echo "=== stop DONE @ $(date -u +%Y-%m-%dT%H:%M:%SZ) ===" >> "$LOG_FILE"
 echo "" >> "$LOG_FILE"
 
 # pnpm run start → **后台**跑（nohup ... &），long-running 进程
-# 输出**丢**（> /dev/null 2>&1）—— 真实 next 日志要看 next 自身 stdout/stderr，**不**在本任务范围
+# **临**时**改**：next 输**出**也**接**到 LOG_FILE（**为**排**查** Server error）
+# —— 排**查**完**后**改回 `> /dev/null 2>&1`
 echo "=== start LAUNCH @ $(date -u +%Y-%m-%dT%H:%M:%SZ) ===" >> "$LOG_FILE"
-nohup pnpm run start > /dev/null 2>&1 &
+nohup pnpm run start >> "$LOG_FILE" 2>&1 &
 START_PID=$!
 echo "=== start PID=$START_PID @ $(date -u +%Y-%m-%dT%H:%M:%SZ) ===" >> "$LOG_FILE"
 

env-example/.env.development.example

@@ -15,6 +15,10 @@ NEXT_PUBLIC_API_CONNECT_TIMEOUT=30000
 NEXT_PUBLIC_API_RECEIVE_TIMEOUT=60000
 NEXT_PUBLIC_API_SEND_TIMEOUT=30000
 
+# next-auth v4（Auth.js）—— JWT 签名密钥
+# dev 环境独立密钥（**不**与 test / prod 共用）
+AUTH_SECRET=PinzhujxR/qMPrY7bAor8qQlwmmy1tJJCex9Tomhk2c=
+
 # 第三方 OAuth
 AUTH_GOOGLE_ID=351948560061-isubggf6eahfii9n0stpf2qu3haralro.apps.googleusercontent.com
 AUTH_GOOGLE_SECRET=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
@@ -24,5 +28,3 @@ AUTH_FACEBOOK_SECRET=004b1a9384b3433e153992e5edcef4ad
 # Cloudflare CDN（test / production 部署后刷缓存用）
 CF_ZONE_ID=b1b6bfb7795667609c8e7f418af0156b
 CF_API_TOKEN=cfut_xyHb70XCw0j8f5Wz5fg5PemUQ2ZHnSpWvmrBvVeK94d3b00f
-
-

env-example/.env.local.example

@@ -9,6 +9,10 @@ NEXT_PUBLIC_API_CONNECT_TIMEOUT=30000
 NEXT_PUBLIC_API_RECEIVE_TIMEOUT=60000
 NEXT_PUBLIC_API_SEND_TIMEOUT=30000
 
+# next-auth v4（Auth.js）—— JWT 签名密钥
+# test 环境独立密钥（**不**与 dev / prod 共用）
+AUTH_SECRET=rKGeHQ/8tKPoh12Kiedil5zHuj9ZfPA0NwY9bgwRqkE=
+
 # 第三方 OAuth
 AUTH_GOOGLE_ID=351948560061-isubggf6eahfii9n0stpf2qu3haralro.apps.googleusercontent.com
 AUTH_GOOGLE_SECRET=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

env-example/.env.production.example

@@ -16,6 +16,10 @@ NEXT_PUBLIC_API_CONNECT_TIMEOUT=30000
 NEXT_PUBLIC_API_RECEIVE_TIMEOUT=60000
 NEXT_PUBLIC_API_SEND_TIMEOUT=30000
 
+# next-auth v4（Auth.js）—— JWT 签名密钥
+# production 环境独立密钥（**最**重要，**签**发**用**户 session cookie）
+AUTH_SECRET=XypsCWoLCNmwOaq4taIMJHe4+cU9YZBaYN4VMTtmSik=
+
 # 第三方 OAuth
 AUTH_GOOGLE_ID=351948560061-isubggf6eahfii9n0stpf2qu3haralro.apps.googleusercontent.com
 AUTH_GOOGLE_SECRET=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