flowfull-python-starter/.env.example at master · pubflow/flowfull-python-starter · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
# ================================
# FLOWFULL-PYTHON - Backend Template
# ================================

# Server Configuration
PORT=3001
HOST=0.0.0.0
ENVIRONMENT=development
BASE_URL=http://localhost:3001

# Database Configuration
DATABASE_URL=postgresql://username:password@localhost:5432/flowfull_db
# DATABASE_URL=mysql://username:password@localhost:3306/flowfull_db
# DATABASE_URL=sqlite:///./flowfull.db

# Database Pool Settings
DATABASE_POOL_SIZE=10
DATABASE_MAX_OVERFLOW=20
DATABASE_POOL_TIMEOUT=30
DATABASE_POOL_RECYCLE=3600

# Flowless Integration
FLOWLESS_API_URL=http://localhost:3000
BRIDGE_VALIDATION_SECRET=your-shared-secret-key-here-min-32-chars
BRIDGE_VALIDATION_TIMEOUT=5000
BRIDGE_RETRY_ATTEMPTS=3

# Session Management
SESSION_VALIDATION_CACHE_TTL=300
SESSION_HEADER_NAME=X-Session-Id
SESSION_COOKIE_NAME=session_id

# ================================
# Authentication & Validation Mode
# ================================
AUTH_VALIDATION_MODE=STANDARD          # DISABLED | STANDARD | ADVANCED | STRICT
AUTH_ENABLE_VALIDATION_MODE=true
AUTH_IP_VALIDATION=true
AUTH_USER_AGENT_VALIDATION=true
AUTH_DEVICE_VALIDATION=false
AUTH_AUTO_INVALIDATE=false
AUTH_LOG_VIOLATIONS=true

# ================================
# HybridCache Configuration
# ================================
CACHE_ENABLED=true
REDIS_URL=redis://localhost:6379
# REDIS_URL=redis://:password@localhost:6379
# REDIS_URL=rediss://default:password@host:6379

# ================================
# Trust Tokens (PASETO v4)
# ================================
# Generate with: python scripts/generate_paseto_key.py
PASETO_PRIVATE_KEY=

# Token TTL (hours)
TOKEN_TTL_HOURS=168
TOKEN_EMAIL_VERIFICATION_TTL_HOURS=24
TOKEN_PASSWORD_RESET_TTL_HOURS=1
TOKEN_INVITATION_TTL_HOURS=168

# ================================
# Security & CORS
# ================================
CORS_ORIGINS=http://localhost:3000,http://localhost:5173
CORS_METHODS=GET,POST,PUT,DELETE,OPTIONS
CORS_HEADERS=Content-Type,Authorization,X-Session-Id
CORS_CREDENTIALS=true
CORS_MAX_AGE=86400

# Rate Limiting
RATE_LIMIT_ENABLED=true
RATE_LIMIT_REQUESTS=100
RATE_LIMIT_WINDOW=60

# ================================
# Logging & Monitoring
# ================================
LOG_LEVEL=INFO
LOG_FORMAT=json
LOG_MODE=false

# ================================
# Development Settings
# ================================
DEV_MODE=true
DEV_CORS_RELAXED=true
DEV_LOG_REQUESTS=true
RELOAD=true