env.example

# Django Core Configuration
SECRET_KEY=replace-with-a-generated-50-plus-character-random-secret
DEBUG=False
# Workflow secret encryption key ring, comma-separated; first key encrypts new values.
# python.exe -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
WORKFLOW_ENCRYPTION_KEYS=
ALLOWED_HOSTS=localhost,127.0.0.1,siem.seclink.info,backend

# PostgreSQL Database Configuration
POSTGRES_DB=siem_db
POSTGRES_USER=siem_user
POSTGRES_PASSWORD=siem_password
POSTGRES_HOST=localhost
POSTGRES_PORT=5432

# CSRF Trusted Origins (comma-separated, no spaces)
CSRF_TRUSTED_ORIGINS=http://localhost:3000,http://127.0.0.1:3000,http://localhost:5173,http://127.0.0.1:5173

# Django production security hardening
# Enable these for HTTPS production deployments.
SECURE_SSL_REDIRECT=false
SECURE_HSTS_SECONDS=0
SECURE_HSTS_INCLUDE_SUBDOMAINS=false
SECURE_HSTS_PRELOAD=false
SESSION_COOKIE_SECURE=true
CSRF_COOKIE_SECURE=true
# Example when TLS is terminated by a trusted proxy/load balancer:
# SECURE_PROXY_SSL_HEADER=HTTP_X_FORWARDED_PROTO,https
# Optional container startup check:
DJANGO_DEPLOY_CHECK=0

# Elasticsearch Configuration (optional, for ES integration)
ES_HOST=http://localhost:9200
ES_USERNAME=elastic
ES_PASSWORD=your-es-password

# Tickets API (for orchestrator ticket creation)
TICKETS_API_BASE=http://localhost:8000/api/v1/tickets/
TICKETS_API_TOKEN=your-token-here


# Shared backend origin for the frontend proxy and Prefect worker callbacks
BACKEND_ORIGIN=http://backend:8000

# OTP Authentication / Registration
OTP_AUTH_ENABLED=true
OTP_HASH_SECRET=change-me-in-production
ADMIN_REGISTRATION_EMAILS=customer@seclink.info

# Email / SMTP (for OTP and notifications)
EMAIL_BACKEND=django.core.mail.backends.smtp.EmailBackend
EMAIL_HOST=smtp.feishu.cn
EMAIL_PORT=587
EMAIL_HOST_USER=customer@seclink.info
EMAIL_HOST_PASSWORD=your-smtp-password
EMAIL_USE_TLS=true
EMAIL_USE_SSL=false
DEFAULT_FROM_EMAIL=customer@seclink.info
EMAIL_TIMEOUT=15

# Prefect Workflow Engine
# PREFECT_API_URL: Prefect Server API endpoint (required for Prefect execution engine)
PREFECT_API_URL=http://127.0.0.1:4200/api
# Deployments register through Prefect events; select one on each workflow.
# PREFECT_API_KEY: Optional API key for Prefect Cloud or authenticated server
PREFECT_API_KEY=
# Worker API credential for ticket actions and api_call HTTP policy reads; progress reporting does not use it.
# Use a dedicated DRF token whose user has is_staff=true. Leave empty when those actions are unused.
PREFECT_WORKER_TOKEN=