mirror of
https://github.com/shankar0123/certctl.git
synced 2026-06-07 12:41:30 +00:00
shankar0123
76 lines
3.1 KiB
Bash
76 lines
3.1 KiB
Bash
# Certctl Configuration Example
|
|
# Copy this file to .env and configure for your environment
|
|
# DO NOT commit .env with real secrets to version control
|
|
|
|
# ==============================================================================
|
|
# PostgreSQL Database Configuration
|
|
# ==============================================================================
|
|
POSTGRES_DB=certctl
|
|
POSTGRES_USER=certctl
|
|
POSTGRES_PASSWORD=change-me-in-production
|
|
POSTGRES_PORT=5432
|
|
|
|
# ==============================================================================
|
|
# Certctl Server Configuration
|
|
# ==============================================================================
|
|
SERVER_HOST=0.0.0.0
|
|
SERVER_PORT=8443
|
|
LOG_LEVEL=info
|
|
|
|
# Database connection string (alternative to individual vars)
|
|
# DB_URL=postgres://certctl:password@localhost:5432/certctl?sslmode=disable
|
|
|
|
# ==============================================================================
|
|
# ACME Configuration
|
|
# ==============================================================================
|
|
# For Let's Encrypt production, use: https://acme-v02.api.letsencrypt.org/directory
|
|
# For Let's Encrypt staging, use: https://acme-staging-v02.api.letsencrypt.org/directory
|
|
ACME_DIRECTORY_URL=https://acme-staging-v02.api.letsencrypt.org/directory
|
|
ACME_EMAIL=admin@example.com
|
|
|
|
# ==============================================================================
|
|
# SMTP Configuration (for email notifications)
|
|
# ==============================================================================
|
|
SMTP_HOST=smtp.example.com
|
|
SMTP_PORT=587
|
|
SMTP_USERNAME=your-smtp-user
|
|
SMTP_PASSWORD=your-smtp-password
|
|
SMTP_FROM_ADDRESS=certctl@example.com
|
|
|
|
# ==============================================================================
|
|
# Webhook Configuration (optional)
|
|
# ==============================================================================
|
|
WEBHOOK_URL=https://your-webhook-endpoint.example.com/notifications
|
|
WEBHOOK_SECRET=your-webhook-secret
|
|
|
|
# ==============================================================================
|
|
# Agent Configuration
|
|
# ==============================================================================
|
|
SERVER_URL=http://localhost:8443
|
|
AGENT_API_KEY=change-me-in-production
|
|
AGENT_NAME=local-agent
|
|
CHECK_INTERVAL=60s
|
|
|
|
# ==============================================================================
|
|
# PgAdmin Configuration (development only)
|
|
# ==============================================================================
|
|
PGADMIN_EMAIL=admin@example.com
|
|
PGADMIN_PASSWORD=admin
|
|
PGADMIN_PORT=5050
|
|
|
|
# ==============================================================================
|
|
# Security Settings
|
|
# ==============================================================================
|
|
# JWT secret for API authentication (generate with: openssl rand -base64 32)
|
|
JWT_SECRET=change-me-in-production
|
|
|
|
# Encryption key for sensitive data (generate with: openssl rand -base64 32)
|
|
ENCRYPTION_KEY=change-me-in-production
|
|
|
|
# ==============================================================================
|
|
# Feature Flags (optional)
|
|
# ==============================================================================
|
|
ENABLE_AUDIT_LOG=true
|
|
ENABLE_METRICS=true
|
|
ENABLE_TRACING=false
|