# Copy this file to .env and edit it: cp .env.example .env
# Nothing here has to be edited: ./scripts/init-env.sh (run by the installer and by make) generates the passwords marked
# "change-me" and replaces the example DOMAIN_NAME with this machine's address. Set your own only if you want to.

#
# General
#
COMPOSE_PROJECT_NAME=rengine

#
# SSL specific configuration (used by `make certs`)
#
AUTHORITY_NAME=CVEngine
AUTHORITY_PASSWORD=change-me
COMPANY=CVEngine
DOMAIN_NAME=cvengine.example.com
COUNTRY_CODE=US
STATE=change-me
CITY=change-me

#
# Database configurations
#
POSTGRES_DB=rengine
POSTGRES_USER=rengine
POSTGRES_PASSWORD=change-me
POSTGRES_PORT=5432
POSTGRES_HOST=db

#
# Optional (see docs/CONFIGURATION.md). Uncomment to use.
#
# CVENGINE_CSRF_TRUSTED_ORIGINS=https://scanner.example.com
# CVENGINE_ALLOW_PRIVATE_TARGETS=1
# Addresses the web container sees connecting to it whose X-Forwarded-For is believed (the real client address for the IP allowlist).
# The default already covers Docker's networks, so leave it unset for the bundled proxy or a proxy on this host. Only ever ADD to it
# (172.16.0.0/12,203.0.113.0/24); replacing it with your proxy's own network makes every request look like it comes from Docker.
# CVENGINE_TRUSTED_PROXIES=172.16.0.0/12
# CELERY_MEM_LIMIT=4g

#
# First admin account (used by `make admin`)
#
DJANGO_SUPERUSER_USERNAME=admin
DJANGO_SUPERUSER_EMAIL=admin@example.com
# Leave the password empty: `make admin` generates one and prints it once. Set it only to choose your own.
DJANGO_SUPERUSER_PASSWORD=