trustlens-ai/.env.example at main · abhishekayu/trustlens-ai · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
# TrustLens AI Configuration
# Copy to .env and fill in values
# Note : Or just flow through the setup wizard auto generate env.
# TrustLens AI Configuration
# Auto-generated by setup wizard — cleared on exit
# env must need

TRUSTLENS_AI_PROVIDER=gemini
TRUSTLENS_GEMINI_API_KEY=
TRUSTLENS_GEMINI_MODEL=gemini-2.5-flash

#──────────────────────────────────────────

# ── Server ──────────────────────────────────────────
TRUSTLENS_HOST=0.0.0.0
TRUSTLENS_PORT=8000
TRUSTLENS_LOG_LEVEL=info
TRUSTLENS_DEBUG=false

# ── Database ────────────────────────────────────────
TRUSTLENS_DB_URL=sqlite+aiosqlite:///./trustlens.db

# ── AI Providers (set at least one) ─────────────────
TRUSTLENS_AI_PROVIDER=gemini

# OpenAI
TRUSTLENS_OPENAI_API_KEY=
TRUSTLENS_OPENAI_MODEL=gpt-4o

# Anthropic
TRUSTLENS_ANTHROPIC_API_KEY=
TRUSTLENS_ANTHROPIC_MODEL=claude-sonnet-4-20250514

# Grok (xAI)
TRUSTLENS_GROK_API_KEY=
TRUSTLENS_GROK_MODEL=grok-3

# Gemini (Google)
TRUSTLENS_GEMINI_API_KEY=
TRUSTLENS_GEMINI_MODEL=gemini-2.5-flash

# ── Crawler / Security ─────────────────────────────
TRUSTLENS_CRAWLER_TIMEOUT=30
TRUSTLENS_CRAWLER_MAX_REDIRECTS=10
TRUSTLENS_CRAWLER_USER_AGENT=TrustLens/0.1 SecurityScanner
TRUSTLENS_SSRF_BLOCK_PRIVATE=true
TRUSTLENS_SCREENSHOT_ENABLED=true

# ── Rate Limiting ───────────────────────────────────
TRUSTLENS_RATE_LIMIT_REQUESTS=30
TRUSTLENS_RATE_LIMIT_WINDOW_SECONDS=60

# ── Domain Access Control ──────────────────────────
# Comma-separated. Empty = no restriction.
TRUSTLENS_DOMAIN_ALLOWLIST=
TRUSTLENS_DOMAIN_DENYLIST=

# ── Scoring (70/30 hybrid) ─────────────────────────
# Rule-based signals: 70%, AI advisory: 30%
TRUSTLENS_SCORE_WEIGHT_RULES=0.70
TRUSTLENS_SCORE_WEIGHT_AI=0.30

# ── API Key Authentication ─────────────────────────
# Set to true to require API keys for all endpoints
TRUSTLENS_API_KEY_REQUIRED=false
TRUSTLENS_API_KEY_HEADER=X-API-Key

# ── Threat Intelligence Feeds ──────────────────────
# Comma-separated feed URLs to auto-ingest at startup
TRUSTLENS_THREAT_FEED_URLS=
TRUSTLENS_THREAT_FEED_REFRESH_HOURS=6

# ── Screenshot Similarity ──────────────────────────
TRUSTLENS_SCREENSHOT_SIMILARITY_THRESHOLD=0.85
TRUSTLENS_SCREENSHOT_HASH_ALGORITHM=phash

# ── Community Reporting ────────────────────────────
TRUSTLENS_COMMUNITY_REPORTS_ENABLED=true
TRUSTLENS_COMMUNITY_REPORT_MIN_TRUST=0.1

# ── Enterprise Mode ────────────────────────────────
TRUSTLENS_ENTERPRISE_MODE=false
TRUSTLENS_ENTERPRISE_BRAND_SCAN_INTERVAL=3600

# ── Observability / Audit ──────────────────────────
TRUSTLENS_AUDIT_LOG_ENABLED=true
TRUSTLENS_SUSPICIOUS_ACTIVITY_THRESHOLD=50