f353e00172
- Restructure .env.example with security-focused documentation, service-specific environment file references, and AWS Secrets Manager integration - Update CLI tests workflow to single Python 3.13 version, add pytest-mock dependency, and consolidate test execution with coverage - Add comprehensive security validation to package publishing workflow with manual approval gates, secret scanning, and release
64 lines
2.7 KiB
Plaintext
64 lines
2.7 KiB
Plaintext
# AITBC Environment Configuration
|
|
# SECURITY NOTICE: Use service-specific environment files
|
|
#
|
|
# For development, copy from:
|
|
# config/environments/development/coordinator.env
|
|
# config/environments/development/wallet-daemon.env
|
|
#
|
|
# For production, use AWS Secrets Manager and Kubernetes secrets
|
|
# Templates available in config/environments/production/
|
|
|
|
# =============================================================================
|
|
# BASIC CONFIGURATION ONLY
|
|
# =============================================================================
|
|
# Application Environment
|
|
APP_ENV=development
|
|
DEBUG=false
|
|
LOG_LEVEL=INFO
|
|
|
|
# =============================================================================
|
|
# SECURITY REQUIREMENTS
|
|
# =============================================================================
|
|
# IMPORTANT: Do NOT store actual secrets in this file
|
|
# Use AWS Secrets Manager for production
|
|
# Generate secure keys with: openssl rand -hex 32
|
|
|
|
# =============================================================================
|
|
# SERVICE CONFIGURATION
|
|
# =============================================================================
|
|
# Choose your service configuration:
|
|
# 1. Copy service-specific .env file from config/environments/
|
|
# 2. Fill in actual values (NEVER commit secrets)
|
|
# 3. Run: python config/security/environment-audit.py
|
|
|
|
# =============================================================================
|
|
# DEVELOPMENT QUICK START
|
|
# =============================================================================
|
|
# For quick development setup:
|
|
# cp config/environments/development/coordinator.env .env
|
|
# cp config/environments/development/wallet-daemon.env .env.wallet
|
|
#
|
|
# Then edit the copied files with your values
|
|
|
|
# =============================================================================
|
|
# PRODUCTION DEPLOYMENT
|
|
# =============================================================================
|
|
# For production deployment:
|
|
# 1. Use AWS Secrets Manager for all sensitive values
|
|
# 2. Reference secrets as: secretRef:secret-name:key
|
|
# 3. Run security audit before deployment
|
|
# 4. Use templates in config/environments/production/
|
|
|
|
# =============================================================================
|
|
# SECURITY VALIDATION
|
|
# =============================================================================
|
|
# Validate your configuration:
|
|
# python config/security/environment-audit.py --format text
|
|
|
|
# =============================================================================
|
|
# FOR MORE INFORMATION
|
|
# =============================================================================
|
|
# See: config/security/secret-validation.yaml
|
|
# See: config/security/environment-audit.py
|
|
# See: config/environments/ directory
|