Initial scaffold: certificate control plane v0.1.0

2026-06-11 18:18:52 +00:00 · 2026-03-14 08:22:17 -04:00
commit d395776a95
57 changed files with 9548 additions and 0 deletions
@@ -0,0 +1,75 @@
+# Certctl Configuration Example
+# Copy this file to .env and configure for your environment
+# DO NOT commit .env with real secrets to version control
+
+# ==============================================================================
+# PostgreSQL Database Configuration
+# ==============================================================================
+POSTGRES_DB=certctl
+POSTGRES_USER=certctl
+POSTGRES_PASSWORD=change-me-in-production
+POSTGRES_PORT=5432
+
+# ==============================================================================
+# Certctl Server Configuration
+# ==============================================================================
+SERVER_HOST=0.0.0.0
+SERVER_PORT=8443
+LOG_LEVEL=info
+
+# Database connection string (alternative to individual vars)
+# DB_URL=postgres://certctl:password@localhost:5432/certctl?sslmode=disable
+
+# ==============================================================================
+# ACME Configuration
+# ==============================================================================
+# For Let's Encrypt production, use: https://acme-v02.api.letsencrypt.org/directory
+# For Let's Encrypt staging, use: https://acme-staging-v02.api.letsencrypt.org/directory
+ACME_DIRECTORY_URL=https://acme-staging-v02.api.letsencrypt.org/directory
+ACME_EMAIL=admin@example.com
+
+# ==============================================================================
+# SMTP Configuration (for email notifications)
+# ==============================================================================
+SMTP_HOST=smtp.example.com
+SMTP_PORT=587
+SMTP_USERNAME=your-smtp-user
+SMTP_PASSWORD=your-smtp-password
+SMTP_FROM_ADDRESS=certctl@example.com
+
+# ==============================================================================
+# Webhook Configuration (optional)
+# ==============================================================================
+WEBHOOK_URL=https://your-webhook-endpoint.example.com/notifications
+WEBHOOK_SECRET=your-webhook-secret
+
+# ==============================================================================
+# Agent Configuration
+# ==============================================================================
+SERVER_URL=http://localhost:8443
+AGENT_API_KEY=change-me-in-production
+AGENT_NAME=local-agent
+CHECK_INTERVAL=60s
+
+# ==============================================================================
+# PgAdmin Configuration (development only)
+# ==============================================================================
+PGADMIN_EMAIL=admin@example.com
+PGADMIN_PASSWORD=admin
+PGADMIN_PORT=5050
+
+# ==============================================================================
+# Security Settings
+# ==============================================================================
+# JWT secret for API authentication (generate with: openssl rand -base64 32)
+JWT_SECRET=change-me-in-production
+
+# Encryption key for sensitive data (generate with: openssl rand -base64 32)
+ENCRYPTION_KEY=change-me-in-production
+
+# ==============================================================================
+# Feature Flags (optional)
+# ==============================================================================
+ENABLE_AUDIT_LOG=true
+ENABLE_METRICS=true
+ENABLE_TRACING=false