bron-vault/.env.example at main · ITSEC-Research/bron-vault · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
# =====================================================
# Bron Vault - Environment Variables Template
# =====================================================
# Copy this file to .env.local and fill in your secure passwords
#
# Usage:
#   1. cp .env.example .env
#   2. Edit .env.local with your secure passwords
#   3. docker compose up -d --build   (or: ./docker-start.sh)
# =====================================================

# -----------------------------------------------------------
# AUTHENTICATION
# -----------------------------------------------------------
# JWT secret for signing authentication tokens
# IMPORTANT: Generate a strong random secret (minimum 32 characters)
# Example: openssl rand -hex 32
JWT_SECRET=super_secret_random_string_at_least_32_chars_long

# -----------------------------------------------------------
# MAIN DATABASE (MySQL/MariaDB)
# -----------------------------------------------------------
# Root password for MySQL (used for admin tasks)
MYSQL_ROOT_PASSWORD=change_me_root_password_123

# Database name (usually no need to change)
MYSQL_DATABASE=bronvaultnew

# Application user for connection from Next.js app
MYSQL_USER=bronvault
MYSQL_PASSWORD=change_me_app_password_123

# -----------------------------------------------------------
# ANALYTICS DATABASE (ClickHouse)
# -----------------------------------------------------------
# User for ClickHouse connection from Next.js app
CLICKHOUSE_USER=default
CLICKHOUSE_PASSWORD=change_me_clickhouse_password_123

# ClickHouse database name for analytics
CLICKHOUSE_DB=bronvault_analytics

# -----------------------------------------------------------
# INTERNAL SYNC USER (Auto-Created)
# -----------------------------------------------------------
# This user is a bridge between MySQL & ClickHouse for MaterializedMySQL replication
# User does NOT need to login with this - only for internal sync
# Make sure password is different from MYSQL_PASSWORD for security
SYNC_USER=clickhouse_sync
SYNC_PASSWORD=change_me_sync_password_123

# -----------------------------------------------------------
# OBJECT STORAGE (MinIO - S3 Compatible)
# -----------------------------------------------------------
# MinIO root credentials for the admin console
# Console accessible at http://localhost:9002
# S3 API accessible at http://localhost:9001
MINIO_ROOT_USER=minioadmin
MINIO_ROOT_PASSWORD=minioadmin

# =====================================================
# IMPORTANT SECURITY NOTES:
# =====================================================
# 1. CHANGE ALL PASSWORDS with strong passwords!
# 2. Do not commit .env to git (already in .gitignore)
# 3. Use different passwords for each user
# 4. Minimum 16 characters, combination of letters, numbers, and symbols
# 5. Store .env.local in a secure location
# =====================================================