portal/.env.example at main · hotosm/portal · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
# Database Configuration
POSTGRES_USER=portal
POSTGRES_PASSWORD=CHANGE_ME_PLEASE
POSTGRES_DB=portal
POSTGRES_PORT=5432  # External port (your machine). Change if port conflict.

# Backend Configuration
BACKEND_PORT=8000
DEBUG=false
# Note: DATABASE_URL uses port 5432 (internal Docker network, don't change)
# For Docker: postgresql+asyncpg://portal:CHANGE_ME_PLEASE@db:5432/portal
# For local: postgresql+asyncpg://postgres:postgres@localhost:PORT/portal
DATABASE_URL=postgresql+asyncpg://portal:CHANGE_ME_PLEASE@db:5432/portal

# Frontend Configuration
FRONTEND_PORT=5173
VITE_API_URL=http://localhost/api
# Use external login service (path-based routing under /login)
VITE_HANKO_URL=http://localhost/login

# Drone-TM Integration (for development/testing only)
# Leave empty in production if not integrating with Drone-TM
VITE_DRONE_TM_FRONTEND_URL=http://localhost/dronetm
VITE_DRONE_TM_API_URL=http://localhost/api/drone-tm

# Docker Build Targets
BACKEND_TARGET=production
FRONTEND_TARGET=production

# CORS Origins (JSON array format)
BACKEND_CORS_ORIGINS=["http://localhost:5173","http://localhost:3000"]

#Internal Drone Tasking Manager endpoint using Portal
# - Production Drone-TM URL: "https://dronetm.org/api"
# - Test Drone-TM (Hanko-backed) URL: "https://testlogin.dronetm.hotosm.org/api"
# - Local Drone-TM (Hanko-backed) URL: "https://dronetm.hotosm.test/api"
DRONE_TM_BACKEND_URL=https://testlogin.dronetm.hotosm.org/api"

#Internal fAIr endpoint using Portal
# - Production fAIr URL: "https://fair.hotosm.org/"
# - Test fAIr (Hanko-backed) URL: "https://testlogin.dronetm.hotosm.org/"
# - Local fAIr (Hanko-backed) URL: "https://fair.hotosm.test/"
FAIR_BACKEND_URL=https://testlogin.fair.hotosm.org/api/v1

# Internal uMap endpoint using Portal
# - Production uMap URL: "https://umap.hotosm.org"
# - Test uMap (Hanko-backed) URL: "https://testlogin.umap.hotosm.org"
# - Local uMap (Docker internal): "https://umap.hotosm.test"
UMAP_BASE_URL=https://testlogin.umap.hotosm.org/

#Internal OAM endpoint using Portal
# - Production OAM URL: "https://openaerialmap.hotosm.test/api"
# - Local OAM URL: "https://openaerialmap.hotosm.test/"
OAM_STAC_API_URL=https://openaerialmap.hotosm.test/api

#Internal Export tool endpoint using Portal
# - Production Export tool URL: "https://export.hotosm.org/"
# - Export tool URL: "https://testlogin.export.hotosm.org/"
# - Local Export tool URL: "https://export-tool.hotosm.test/api"
EXPORT_TOOL_API_BASE_URL=https://export-tool.hotosm.test/api

# Hanko Authentication (SSO)
HANKO_API_URL=https://dev.login.hotosm.org
JWT_ISSUER=auto
COOKIE_SECRET=CHANGE_ME_PLEASE_MIN_32_BYTES_LONG

# OpenStreetMap OAuth (Required for OSM login integration)
# Register your app at: https://www.openstreetmap.org/oauth2/applications/new
# Production Redirect URI: https://portal.hotosm.org/api/auth/osm/callback
# Development Redirect URI: http://127.0.0.1:5173/api/auth/osm/callback (use 127.0.0.1, NOT localhost)
# Scopes: read_prefs
OSM_CLIENT_ID=your-osm-client-id
OSM_CLIENT_SECRET=your-osm-client-secret
# IMPORTANT: Change this to your production domain in EC2
OSM_REDIRECT_URI=https://portal.hotosm.org/api/auth/osm/callback

# Admin Configuration (comma-separated email addresses)
# Users with these emails can access /api/admin/* endpoints
ADMIN_EMAILS=admin@hotosm.org