mindlogger-backend-refactor/.env.default at b21166c0d9447be0bbcf90bbb78279220ed5f98b · ChildMindInstitute/mindlogger-backend-refactor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
# Python configurations

PYTHONPATH=src/


# PostgreSQL configurations

DATABASE__HOST=localhost
DATABASE__PORT=5432
DATABASE__PASSWORD=postgres
DATABASE__USER=postgres
DATABASE__DB=mindlogger_backend


# Redis configuration

REDIS__HOST=localhost
REDIS__MFA_SESSION_TTL=300
REDIS__MFA_MAX_ATTEMPTS=5
REDIS__MFA_GLOBAL_LOCKOUT_ATTEMPTS=10
REDIS__MFA_GLOBAL_LOCKOUT_TTL=900


# Application configurations

# CORS
CORS__ALLOW_ORIGINS=https://localhost
CORS__ALLOW_ORIGIN_REGEX=https?://localhost:\d+
CORS__ALLOW_CREDENTIALS=true
CORS__ALLOW_METHODS=*
CORS__ALLOW_HEADERS=*

# Authentication
AUTHENTICATION__ACCESS_TOKEN__SECRET_KEY="secret1"
AUTHENTICATION__REFRESH_TOKEN__SECRET_KEY="secret2"
AUTHENTICATION__MFA_TOKEN__SECRET_KEY="secret3"
AUTHENTICATION__ACCESS_TOKEN__EXPIRATION=30
AUTHENTICATION__REFRESH_TOKEN__EXPIRATION=540
# Shorter token lifetimes (minutes) for web/admin clients (default 15 / 30 in code).
# Mobile and unknown/legacy clients always use the EXPIRATION values above. Override here
# per environment if needed.
#AUTHENTICATION__ACCESS_TOKEN__WEB_ADMIN_EXPIRATION=15
#AUTHENTICATION__REFRESH_TOKEN__WEB_ADMIN_EXPIRATION=30
# Grace period (seconds) after a web/admin refresh token rotates during which the old
# token still redeems for the same replacement pair (default 60 in code).
#AUTHENTICATION__REFRESH_TOKEN__ROTATION_GRACE_SECONDS=60
AUTHENTICATION__ALGORITHM="HS256"
AUTHENTICATION__TOKEN_TYPE="Bearer"
AUTHENTICATION__PASSWORD_RECOVER__EXPIRATION=900
AUTHENTICATION__REFRESH_TOKEN__TRANSITION_KEY=
#AUTHENTICATION__REFRESH_TOKEN__TRANSITION_EXPIRE_DATE=

# MFA (Multi-Factor Authentication) settings
# Generate a new key using: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
MFA__TOTP_ENCRYPTION_KEY=_laj8VzSPpUSUTMxb1gISn37xjVz4zFpTUHd3wm3AFw=
MFA__TOTP_ISSUER_NAME=MindLogger
MFA__TOTP_VALID_WINDOW=1
MFA__PENDING_MFA_EXPIRATION_SECONDS=600
MFA__RECOVERY_CODE_ENCRYPTION_KEY=xK9vL2mN4pQ6rS8tU0wV1yA3bC5dE7fG9hI1jK3lM5n=
MFA__RECOVERY_CODE_COUNT=10
MFA__RECOVERY_CODE_LENGTH=10

# Password validation
PASSWORD__MIN_LENGTH=10
PASSWORD__MIN_CHARACTER_TYPES=3

# Mailing
MAILING__MAIL__USERNAME=mailhog
MAILING__MAIL__PASSWORD=mailhog
MAILING__MAIL__SERVER=localhost
MAILING__MAIL__PORT=1025
MAILING__MAIL_STARTTLS=
MAILING__MAIL_SSL_TLS=
MAILING__MAIL__FROM_EMAIL="noreply@cmiml.net"
MAILING__MAIL__FROM_NAME="Curious"
# Currently these settings are not used
MAILING__USE_CREDENTIALS=False
MAILING__VALIDATE_CERTS=False


# Third party

# FCM Notification api key
NOTIFICATION__API_KEY=

# CDN configs (container by default)
CDN__DOMAIN=http://localhost:9000
CDN__SECRET_KEY=miniosecret
CDN__ACCESS_KEY=minioaccess
CDN__REGION=us-east-1
CDN__BUCKET_ANSWER=answer
CDN__BUCKET=media
CDN__BUCKET_OPERATIONS=operations
CDN__STORAGE_ADDRESS=
CDN__TTL_SIGNED_URLS=3600

# jsonld converter
JSONLD_CONVERTER__PROTOCOL_PASSWORD=

# RabbitMq
# Uncomment for local development
# RABBITMQ__USE_SSL=False
RABBITMQ__URL=localhost

# MinIO
# Uncomment for local development
# AWS_ACCESS_KEY_ID=minioaccess
# AWS_SECRET_ACCESS_KEY=miniosecret
# AWS_ENDPOINT_URL=http://localhost:9000
# AWS_DEFAULT_REGION=us-east-1

# Secret key for data encryption. Use this key only for local development
SECRETS__SECRET_KEY=0eb7f5d4c1367199c21e9a2ec793b5a481b60fe2af24464bcb18ac7fa48a645f

MULTI_INFORMANT__TEMP_RELATION_EXPIRY_SECS=86400

# 1upHealth
ONEUP_HEALTH__CLIENT_ID=
ONEUP_HEALTH__CLIENT_SECRET=
ONEUP_HEALTH__MAX_ERROR_RETRIES=5


# Test configurations

# False for local dev
DD_TRACE_ENABLED=false
DD_LOGS_ENABLED=false
LOG_JSON_FORMAT=false

# Handle extra values gracefully
AUTHENTICATION__EXTRA="This extra test parameter should be gracefully handled without error."
AUTHENTICATION__ACCESS_TOKEN__EXTRA="This extra nested test parameter should be gracefully handled without error."
MAILING__MAIL__EXTRA="This extra nested test parameter should be gracefully handled without error."