62 lines
2.2 KiB
Plaintext
62 lines
2.2 KiB
Plaintext
# Copy this to .env and fill in all values before starting.
|
|
# Never commit .env to version control.
|
|
|
|
# ---- Django ----
|
|
DJANGO_SECRET_KEY=replace-with-a-secure-random-key
|
|
DJANGO_SETTINGS_MODULE=config.settings.local
|
|
DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1
|
|
DEBUG=true
|
|
FRONTEND_PORT=8080
|
|
# Leave empty for same-origin /api proxy (recommended in Docker setups).
|
|
# Set to a full URL only when the API is hosted on a different domain.
|
|
FRONTEND_API_BASE_URL=
|
|
|
|
# ---- Database ----
|
|
# DB_PASSWORD is used by docker-compose.prod.yml to set the postgres password
|
|
# and build the DATABASE_URL automatically.
|
|
DB_PASSWORD=replace-with-a-secure-db-password
|
|
# Format: postgres://USER:PASSWORD@HOST:PORT/DBNAME
|
|
# Docker Compose (recommended): use service name `db`
|
|
DATABASE_URL=postgres://training:training@db:5432/training
|
|
# Host-local alternative (no Docker):
|
|
# DATABASE_URL=postgres://training:training@localhost:5432/training
|
|
|
|
# ---- nginx / TLS ----
|
|
# Set to false when nginx serves plain HTTP; set to true when TLS is terminated
|
|
# at nginx or an upstream proxy. Only used with config.settings.prod.
|
|
SECURE_SSL_REDIRECT=false
|
|
HTTP_PORT=80
|
|
|
|
# ---- Redis / Cache / Celery broker ----
|
|
# Format: redis://[:password@]host:port/db
|
|
# Docker Compose (recommended): use service name `redis`
|
|
REDIS_URL=redis://redis:6379/0
|
|
# Host-local alternative (no Docker):
|
|
# REDIS_URL=redis://localhost:6379/0
|
|
|
|
# ---- Certificate renderer isolation ----
|
|
CERTIFICATE_RENDERER_URL=http://certificate-renderer:8090/render
|
|
CERTIFICATE_RENDERER_TIMEOUT_SECONDS=20
|
|
# Shared secret between celery/web and the internal renderer container
|
|
CERTIFICATE_RENDERER_TOKEN=
|
|
|
|
# ---- OIDC (Authentik) ----
|
|
OIDC_RP_CLIENT_ID=
|
|
OIDC_RP_CLIENT_SECRET=
|
|
OIDC_OP_AUTHORIZATION_ENDPOINT=https://auth.example.com/application/o/authorize/
|
|
OIDC_OP_TOKEN_ENDPOINT=https://auth.example.com/application/o/token/
|
|
OIDC_OP_USER_ENDPOINT=https://auth.example.com/application/o/userinfo/
|
|
OIDC_OP_JWKS_ENDPOINT=https://auth.example.com/application/o/training/jwks/
|
|
OIDC_RP_SIGN_ALGO=RS256
|
|
|
|
# ---- Storage (prod only) ----
|
|
AWS_STORAGE_BUCKET_NAME=
|
|
AWS_S3_REGION_NAME=eu-central-1
|
|
|
|
# ---- Email (prod only) ----
|
|
EMAIL_HOST=
|
|
EMAIL_PORT=587
|
|
EMAIL_HOST_USER=
|
|
EMAIL_HOST_PASSWORD=
|
|
DEFAULT_FROM_EMAIL=noreply@example.com
|