-
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path.env.example
More file actions
73 lines (63 loc) · 2.78 KB
/
Copy path.env.example
File metadata and controls
73 lines (63 loc) · 2.78 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
# EchoState environment configuration
# App version (must match root VERSION file; used by Docker builds)
ECHOSTATE_VERSION=0.0.2-beta.1
# GHCR image overrides (compose defaults to :beta from dev CI)
# ECHOSTATE_API_IMAGE=ghcr.io/notfixingit3/echostate:beta
# ECHOSTATE_FRONTEND_IMAGE=ghcr.io/notfixingit3/echostate-frontend:beta
#
# Pin a release (both images must use the same version after dev CI finishes):
# ECHOSTATE_API_IMAGE=ghcr.io/notfixingit3/echostate:0.0.1-beta.25
# ECHOSTATE_FRONTEND_IMAGE=ghcr.io/notfixingit3/echostate-frontend:0.0.1-beta.25
# Dev CI publishes :beta and the root VERSION as semver tags on api + frontend.
ECHOSTATE_BRANCH=dev
ECHOSTATE_GITHUB_REPO=notfixingit3/echostate
ECHOSTATE_UPDATE_CHECK=true
ECHOSTATE_ENV=development
ECHOSTATE_PORT=8080
# PostgreSQL
POSTGRES_USER=echostate
POSTGRES_PASSWORD=echostate
POSTGRES_DB=echostate
POSTGRES_PORT=5432
# Frontend
FRONTEND_PORT=3001
FRONTEND_URL=http://localhost:3001
# Browserless Chrome (docker compose exposes port 3000 on localhost)
BROWSER_PORT=3000
# For local `go run ./main.go` — use localhost. The api service in compose always uses ws://browser:3000/.
BROWSER_WS_URL=ws://localhost:3000/
# Neo4j (optional graph sync)
NEO4J_PORT=7687
NEO4J_URI=bolt://neo4j:7687
NEO4J_USER=neo4j
NEO4J_PASSWORD=echostate123
# Optional API key for write endpoints when auth is not required (no users bootstrapped).
# Leave unset for open local development; set in production.
# ECHOSTATE_API_KEY=your-secret-key
# Passkey auth (see README § Authentication)
# Required in production once users exist:
# ECHOSTATE_AUTH_PEPPER=long-random-secret-for-code-and-session-hashing
# Required for CLI recovery codes (docker compose run --rm api auth issue-admin-code):
# ECHOSTATE_BREAK_GLASS_SECRET=long-random-secret-for-cli-recovery-codes
# Required for `auth issue-admin-code` and for E2E_REUSE_STACK=1 Playwright re-runs.
# First admin: docker compose run --rm api auth bootstrap-admin
# go run ./main.go auth bootstrap-admin (non-Docker)
# Optional enrichment keys (paid/quota-limited — see THIRD_PARTY.md):
# Configure in Admin → System or set here for compose.
# SHODAN_API_KEY=... # Shodan membership (host + favicon search)
# CENSYS_API_ID=... # Censys Search API v2
# CENSYS_API_SECRET=...
# HIBP_API_KEY=... # Have I Been Pwned paid API
# RISKIQ_API_USER=... # RiskIQ / PassiveTotal (enterprise)
# RISKIQ_API_KEY=...
# VIRUSTOTAL_API_KEY=... # VirusTotal passive DNS (strict free-tier limits)
# Observability (metrics, tracing, logging)
ECHOSTATE_METRICS_PORT=9090
OTEL_EXPORTER_OTLP_ENDPOINT=http://jaeger:4317
ECHOSTATE_LOG_LEVEL=info
ECHOSTATE_LOG_FORMAT=text
OTEL_TRACES_SAMPLER=always_on
OTEL_TRACES_SAMPLER_ARG=1.0
# pWhois IP enrichment
ECHOSTATE_PWHOIS_ENABLED=true
PWHOIS_CACHE_TTL_HOURS=24