genichin
8370d998d2
- Add CREDENTIAL_ENCRYPTION_KEY environment variable with Fernet key generation guide - Improve service token issue command to display raw token once with warning - Refactor token list display function for better UX (new print_service_token_list) - Keep backward compatibility with print_service_token_table alias
41 lines
1.2 KiB
Bash
41 lines
1.2 KiB
Bash
# Application Configuration
|
|
PORTFOLIOHUB_ALLOWED_ORIGINS=http://localhost:3000
|
|
PORTFOLIOHUB_READ_TOKENS=read-token-123
|
|
PORTFOLIOHUB_TRADE_WRITE_TOKENS=trade-token-456
|
|
PORTFOLIOHUB_ADMIN_TOKENS=admin-token-789
|
|
PORTFOLIOHUB_ENVIRONMENT=development
|
|
|
|
# Enable DB-backed repository (uses TIMESCALEDB_* below)
|
|
PORTFOLIOHUB_DB_ENABLED=true
|
|
PORTFOLIOHUB_BOOTSTRAP_USERNAME=
|
|
PORTFOLIOHUB_BOOTSTRAP_EMAIL=
|
|
PORTFOLIOHUB_BOOTSTRAP_PASSWORD=
|
|
PORTFOLIOHUB_SESSION_TOKEN_TTL_HOURS=12
|
|
PORTFOLIOHUB_CLIENT_TOKEN_DEFAULT_TTL_DAYS=365
|
|
PORTFOLIOHUB_BOT_TOKEN_DEFAULT_TTL_DAYS=365
|
|
|
|
# Credential encryption key (Fernet, required when DB_ENABLED=true)
|
|
# Generate: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
|
|
CREDENTIAL_ENCRYPTION_KEY=
|
|
|
|
# TimescaleDB / PostgreSQL connection settings
|
|
TIMESCALEDB_HOST=localhost
|
|
TIMESCALEDB_PORT=5432
|
|
TIMESCALEDB_NAME=portfolio_hub
|
|
TIMESCALEDB_USER=portfolio_hub_user
|
|
TIMESCALEDB_PASSWORD=change-me
|
|
TIMESCALEDB_SSLMODE=prefer
|
|
TIMESCALEDB_CONNECT_TIMEOUT_SEC=10
|
|
TIMESCALEDB_APPLICATION_NAME=portfoliohub
|
|
|
|
# Redis (for caching, sessions, etc.)
|
|
REDIS_HOST=localhost
|
|
REDIS_PORT=6379
|
|
REDIS_DB=0
|
|
REDIS_PASSWORD=
|
|
|
|
# Loki (for logging)
|
|
LOKI_HOST=localhost
|
|
LOKI_PORT=3100
|
|
LOKI_ENABLED=false
|