data-to-science/backend.example.env at main · gdslab/data-to-science · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
API_PROJECT_NAME="Data To Science"
API_DOMAIN=http://localhost:8000

# Comma-separated list of browser origins allowed to make credentialed
# (cookie-bearing) cross-origin requests. When empty, the API falls back to
# allowing anonymous GET requests from any origin. Required for partner web
# apps that log in cross-origin.
# Example: https://partner.app,https://viewer.partner.app
BACKEND_CORS_ORIGINS=

CELERY_BROKER_URL=redis://redis:6379/0
CELERY_RESULT_BACKEND=redis://redis:6379/0

# Feature flags for optional modules
ENABLE_BREEDBASE=false
ENABLE_CAMPAIGNS=false
ENABLE_IFORESTER=false
ENABLE_STAC=false

# Optional: comma-separated allowed BreedBase hostnames for BrAPI proxy.
# When commented out or empty, any public host with a /brapi/ path is allowed.
# Set to restrict which BreedBase servers the proxy can reach.
#BREEDBASE_ALLOWED_HOSTS=breedbase1.example.com,breedbase2.example.com

# Adds external link to a viewer application in published STAC Items
# Assumes the URL will accept a "url" query parameter
#EXTERNAL_VIEWER_URL=

# Enable OpenTelemetry
ENABLE_OPENTELEMETRY=false

# Rate limiting (slowapi)
# Set to true to enable rate limiting on auth, registration, and public endpoints.
# Use Redis for multi-worker deployments (DB 1 avoids colliding with Celery on DB 0).
RATE_LIMIT_ENABLED=false
RATE_LIMIT_STORAGE_URI=redis://redis:6379/1

# separate each extension by comma
EXTENSIONS=
# container mount point for external storage (see .env for host mount point)
EXTERNAL_STORAGE=

MAIL_ENABLED=0
MAIL_SERVER=
MAIL_USERNAME=
MAIL_PASSWORD=
MAIL_FROM=
MAIL_FROM_NAME="Data To Science Support"
MAIL_ADMINS=email1@example.com,email2@example.com
# Comma-separated emails that receive contact form submissions (CC'd on user confirmation)
MAIL_CONTACT_RECIPIENTS=
MAIL_PORT=587

# API access token for Mapbox account
MAPBOX_ACCESS_TOKEN=

POINT_LIMIT=1000000

RABBITMQ_HOST=
RABBITMQ_USERNAME=
RABBITMQ_PASSWORD=

SECRET_KEY=CHANGEME-your-super-secret-key-32-chars-min

#STAC_API_KEY=
#STAC_API_URL=
#STAC_API_TEST_URL=
#STAC_BROWSER_URL=

# AWS S3 storage for STAC publishing
# When configured, data products and raw data are uploaded to S3 during STAC publishing.
# The S3 URLs are used as asset hrefs in published STAC items.
# Leave empty to use local server URLs (default behavior).
#AWS_S3_BUCKET_NAME=
#AWS_S3_REGION=us-east-1
#AWS_ACCESS_KEY_ID=
#AWS_SECRET_ACCESS_KEY=

# Cloudflare Turnstile secret key for bot protection on registration
# Leave empty to disable Turnstile validation
TURNSTILE_SECRET_KEY=

# Set to 1 to require HTTPS for cookies (recommended for production behind TLS).
# The default of 0 allows cookies over HTTP, which is needed for local and quickstart
# deployments that do not use HTTPS.
HTTP_COOKIE_SECURE=0

LIMIT_MAX_REQUESTS=5000
UVICORN_WORKERS=4