kukkuu/.env.example at main · City-of-Helsinki/kukkuu · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
SECRET_KEY=
APPLY_MIGRATIONS=1
ADD_DEFAULT_LANGUAGES=1
DEBUG=1
# Values in DATABASE_* and POSTGRES_* variables must match!
# DATABASE_URL is used by Django
# DATABASE_HOST is used by docker-entrypoint.sh
# POSTGRES_* variables are used by the Postgres Docker container
# i.e. DATABASE_URL should be:
# postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${DATABASE_HOST}/${POSTGRES_DB}
# or optionally contain a port number e.g. ":5434" after the host
# Database settings for Docker + Docker compose based local development:
DATABASE_URL=postgres://kukkuu:kukkuu@kukkuu-db.helsinki/kukkuu
DATABASE_HOST=kukkuu-db.helsinki
# Database settings for non-Docker local development:
# DATABASE_URL=postgres://kukkuu:kukkuu@localhost/kukkuu
# DATABASE_HOST=localhost
POSTGRES_USER=kukkuu
POSTGRES_PASSWORD=kukkuu
POSTGRES_DB=kukkuu
SKIP_DATABASE_CHECK=0
ALLOWED_HOSTS=*
CORS_ALLOWED_ORIGINS=http://localhost:3000,http://localhost:3001,http://localhost:3002
CORS_ALLOW_ALL_ORIGINS=True
# For Keycloak test environment authentication service:
TOKEN_AUTH_AUTHSERVER_URL=https://tunnistus.test.hel.ninja/auth/realms/helsinki-tunnistus
# For local Tunnistamo authentication service:
# TOKEN_AUTH_AUTHSERVER_URL=http://tunnistamo-backend:8000/openid
# For local Kukkuu API:
TOKEN_AUTH_ACCEPTED_AUDIENCE=kukkuu-api-dev,profile-api-test
# For test env Kukkuu API:
# TOKEN_AUTH_ACCEPTED_AUDIENCE=kukkuu-api-test,profile-api-test
TOKEN_AUTH_ACCEPTED_SCOPE_PREFIX=
TOKEN_AUTH_REQUIRE_SCOPE_PREFIX=False
GDPR_API_QUERY_SCOPE=gdprquery
GDPR_API_DELETE_SCOPE=gdprdelete
GDPR_API_AUTHORIZATION_FIELD=authorization.permissions.scopes
HELUSERS_BACK_CHANNEL_LOGOUT_ENABLED=True
HELUSERS_PASSWORD_LOGIN_DISABLED=False
KUKKUU_HASHID_SALT=abcdefg123456
KUKKUU_TICKET_VERIFICATION_URL=http://localhost:3000/ticket-verification-endpoint/{reference_id}
MAIL_MAILGUN_KEY=
MAIL_MAILGUN_DOMAIN=hel.fi
MAIL_MAILGUN_API=https://api.eu.mailgun.net/v3
KUKKUU_NOTIFICATIONS_SHEET_ID=1TkdQsO50DHOg5pi1JhzudOL1GKpiK-V2DCIoAipKj-M
TOKEN_AUTH_BROWSER_TEST_ENABLED=0
TOKEN_AUTH_BROWSER_TEST_JWT_256BIT_SIGN_SECRET=your-256-bit-secret
TOKEN_AUTH_BROWSER_TEST_JWT_ISSUER=https://kukkuu-ui.test.hel.ninja,https://kukkuu-admin.test.hel.ninja

# Django-admin Keycloak login related variables:
SOCIAL_AUTH_TUNNISTAMO_KEY=kukkuu-django-admin-dev
# Get secret from keyvault, see README.md for instructions:
SOCIAL_AUTH_TUNNISTAMO_SECRET=
SOCIAL_AUTH_TUNNISTAMO_OIDC_ENDPOINT=https://tunnistus.test.hel.ninja/auth/realms/helsinki-tunnistus

# Sentry configuration
# SENTRY_DSN=https://abcdefg@your.sentry.here/999
# SENTRY_ENVIRONMENT=local
# SENTRY_PROFILE_SESSION_SAMPLE_RATE=0
# SENTRY_TRACES_SAMPLE_RATE=0
# SENTRY_TRACES_IGNORE_PATHS=/healthz,/readiness