auth-service/.env.staging.example at main · qf-studio/auth-service · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
# Auth Service — Staging Environment
# Copy to .env.staging and fill in real values

# ── Server ──────────────────────────────────────────
APP_ENV=staging
PUBLIC_PORT=4000
ADMIN_PORT=4001
LOG_LEVEL=debug

# ── PostgreSQL ──────────────────────────────────────
POSTGRES_HOST=postgres
POSTGRES_PORT=5432
POSTGRES_DB=auth_staging
POSTGRES_USER=auth_user
POSTGRES_PASSWORD=CHANGE_ME_staging_db_password
POSTGRES_SSLMODE=disable
POSTGRES_MAX_CONNS=10

# ── Redis ───────────────────────────────────────────
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_PASSWORD=CHANGE_ME_staging_redis_password
REDIS_DB=0

# ── JWT / Token Signing ─────────────────────────────
# Path to ES256 or EdDSA private key (PEM)
JWT_PRIVATE_KEY_PATH=/run/secrets/jwt_private_key
JWT_ALGORITHM=ES256
ACCESS_TOKEN_TTL=15m
REFRESH_TOKEN_TTL=24h

# ── System Secrets ──────────────────────────────────
# Comma-separated; newest first for rotation
SYSTEM_SECRETS=CHANGE_ME_staging_system_secret_1

# ── Password Hashing (Argon2id) ────────────────────
ARGON2_MEMORY=19456
ARGON2_TIME=2
ARGON2_PARALLELISM=1
PASSWORD_PEPPER=CHANGE_ME_staging_pepper

# ── Rate Limiting ───────────────────────────────────
RATE_LIMIT_RPS=20
RATE_LIMIT_BURST=40

# ── TLS ─────────────────────────────────────────────
TLS_ENABLED=false

# ── CORS ────────────────────────────────────────────
CORS_ALLOWED_ORIGINS=https://staging.quantflow.studio