fix: make CONTRIBUTING instructions work & fix example envs

[cdanis]

No description provided.

[stonith404]

Thanks. PUBLIC_APP_URL doesn't need SSL if it's running on localhost though. And MAXMIND_LICENSE_KEY is not required, if not provided it just won't lookup the IPs

[cdanis]

Thanks. PUBLIC_APP_URL doesn't need SSL if it's running on localhost though.

Does Pocket ID meaningfully operate without SSL? I thought you couldn't add a passkey at all

And MAXMIND_LICENSE_KEY is not required, if not provided it just won't lookup the IPs
Good point, and that might change soon anyway with the custom download url. Will adjust soon

[stonith404]

Yeah localhost is the only exception where adding passkeys work without SSL.

[cdanis]

Oh thanks, very good to know. Is it specifically localhost, or localhost as the final domain component, or does it have to do with the resolved IP address?

[stonith404]

I'm not sure to be honest but probably the resolved IP.

Locally-delivered resources such as those with http://127.0.0.1 URLs, http://localhost and http://*.localhost URLs (e.g. http://dev.whatever.localhost/), and file:// URLs are also considered to have been delivered securely.

https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts