61 lines
2.4 KiB
Plaintext
61 lines
2.4 KiB
Plaintext
# GovOPlaN self-hosted install configuration.
|
|
# Copy to a deployment-local .env or secret store. Do not commit populated secrets.
|
|
|
|
APP_ENV=production
|
|
# Live graph changes are useful in development. Production should apply saved
|
|
# module state through a coordinated restart of all API and worker processes.
|
|
GOVOPLAN_MODULE_LIVE_APPLY_ENABLED=
|
|
GOVOPLAN_INSTALL_PROFILE=self-hosted
|
|
MASTER_KEY_B64=<generate-with-govoplan-config-env-template-generate-secrets>
|
|
|
|
DATABASE_URL=postgresql+psycopg://govoplan:change-me@127.0.0.1:5432/govoplan
|
|
GOVOPLAN_DATABASE_URL_PGTOOLS=postgresql://govoplan:change-me@127.0.0.1:5432/govoplan
|
|
GOVOPLAN_DB_POOL_SIZE=5
|
|
GOVOPLAN_DB_MAX_OVERFLOW=10
|
|
GOVOPLAN_DB_POOL_TIMEOUT_SECONDS=30
|
|
GOVOPLAN_DB_POOL_RECYCLE_SECONDS=1800
|
|
|
|
ENABLED_MODULES=tenancy,organizations,identity,idm,access,admin,dashboard,policy,audit,files,mail,campaigns,calendar,poll,scheduling,connectors,datasources,dataflow,workflow,views,postbox,notifications,docs,ops
|
|
|
|
CELERY_ENABLED=true
|
|
REDIS_URL=redis://127.0.0.1:6379/0
|
|
CELERY_QUEUES=send_email,append_sent,notifications,calendar,dataflow,events,default
|
|
CALENDAR_OUTBOX_TERMINAL_RETENTION_DAYS=90
|
|
|
|
GOVOPLAN_CONNECTOR_ALLOW_PRIVATE_NETWORKS=false
|
|
GOVOPLAN_CONNECTOR_MAX_STRUCTURED_RESPONSE_BYTES=16777216
|
|
GOVOPLAN_CONNECTOR_MAX_FILE_TRANSFER_BYTES=536870912
|
|
GOVOPLAN_CONNECTOR_SECRET_ENV_ALLOWLIST=
|
|
GOVOPLAN_CONNECTOR_CA_BUNDLE_ALLOWLIST=
|
|
GOVOPLAN_HTTP_MAX_REQUEST_BODY_BYTES=536870912
|
|
GOVOPLAN_HTTP_HSTS_SECONDS=31536000
|
|
|
|
AUTH_LOGIN_THROTTLE_ENABLED=true
|
|
AUTH_ACTIVITY_TOUCH_INTERVAL_SECONDS=300
|
|
AUTH_LOGIN_THROTTLE_IDENTITY_LIMIT=10
|
|
AUTH_LOGIN_THROTTLE_CLIENT_LIMIT=100
|
|
AUTH_LOGIN_THROTTLE_WINDOW_SECONDS=900
|
|
AUTH_LOGIN_THROTTLE_REDIS_RETRY_SECONDS=30
|
|
# Production startup fails without Redis unless this explicit single-process
|
|
# risk acknowledgement is enabled.
|
|
GOVOPLAN_ALLOW_PROCESS_LOCAL_LOGIN_THROTTLE=false
|
|
|
|
CORS_ORIGINS=https://govoplan.example.org
|
|
GOVOPLAN_TRUSTED_HOSTS=govoplan.example.org
|
|
FORWARDED_ALLOW_IPS=127.0.0.1
|
|
AUTH_COOKIE_SECURE=true
|
|
AUTH_COOKIE_SAMESITE=lax
|
|
AUTH_COOKIE_DOMAIN=
|
|
|
|
FILE_STORAGE_BACKEND=local
|
|
FILE_STORAGE_LOCAL_ROOT=/var/lib/govoplan/files
|
|
FILE_STORAGE_LOCAL_FALLBACK_ROOTS=
|
|
|
|
DEV_AUTO_MIGRATE_ENABLED=false
|
|
DEV_BOOTSTRAP_ENABLED=false
|
|
DEV_MAILBOX_API_ENABLED=false
|
|
|
|
GOVOPLAN_MODULE_PACKAGE_CATALOG_URL=https://govoplan.add-ideas.de/catalogs/v1/channels/stable.json
|
|
GOVOPLAN_MODULE_PACKAGE_CATALOG_TRUSTED_KEYS_FILE=/etc/govoplan/catalog-keyring.json
|
|
GOVOPLAN_MODULE_PACKAGE_CATALOG_APPROVED_CHANNEL=stable
|