folio/.env.example at main · aybruhm/folio · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
# ============================================================================
# Folio Configuration
# ============================================================================
# Copy this file to .env and configure for your environment.
# DO NOT commit the actual .env file (it contains secrets).
# ============================================================================

# ============================================================================
# DATABASE CONFIGURATION
# ============================================================================

# Database username
DB_USER=folio

# Database password (CHANGE IN PRODUCTION)
# Use a strong random password: $(openssl rand -base64 32)
DB_PASSWORD=folio_dev_password

# Database name
DB_NAME=folio

# Database port (default 5432)
DB_PORT=5432

# Database connection pool size
DB_POOL_SIZE=20

# Database connection pool overflow
DB_MAX_OVERFLOW=40

# ============================================================================
# API CONFIGURATION
# ============================================================================

# API environment (development, production)
API_ENV=development

# API host binding
API_HOST=0.0.0.0

# API port
API_PORT=8000

# Log level (DEBUG, INFO, WARNING, ERROR, CRITICAL)
LOG_LEVEL=INFO

# CORS allowed origins (comma-separated for production)
# Development: http://localhost:3000
# Production: https://your-domain.com
ALLOWED_ORIGINS=http://localhost:3000

# ============================================================================
# BACKGROUND JOBS
# ============================================================================

# Enable APScheduler background jobs (true/false)
SCHEDULER_ENABLED=true

# Scheduler timezone (default UTC)
SCHEDULER_TIMEZONE=UTC

# ============================================================================
# FRONTEND CONFIGURATION
# ============================================================================

# Public API base URL (used by frontend)
# Development: http://localhost:8000
# Production: https://your-domain.com/api
PUBLIC_API_BASE_URL=http://localhost:8000

# Node environment (development, production)
NODE_ENV=development

# Web server port
WEB_PORT=3000

# ============================================================================
# ENVIRONMENT
# ============================================================================

# Node/Python environment
NODE_ENV=development

# ============================================================================
# SECURITY NOTES
# ============================================================================
#
# PRODUCTION CHECKLIST:
# 1. Change DB_PASSWORD to strong random value
# 2. Set API_ENV=production
# 3. Set NODE_ENV=production
# 4. Update ALLOWED_ORIGINS to your domain
# 5. Update PUBLIC_API_BASE_URL to your domain (https)
# 6. Enable HTTPS/SSL in reverse proxy
# 7. Use strong database credentials
# 8. Run behind Nginx reverse proxy
# 9. Set up firewall rules
# 10. Configure database backups
#
# DO NOT:
# - Expose .env file in git repository
# - Use default passwords in production
# - Run with DEBUG enabled
# - Allow all CORS origins in production
#
# ============================================================================