.env.example

# Engine
APP_NAME="Your-App-Name"
PORT=5095
ENABLE_CLIENT_AUTH=true

# Client authentication
CLIENT_TOKEN_IDENTIFIER=x-client-token
BASIC_AUTH_USER=admin
BASIC_AUTH_PASS=secret

# JWT Tokens
ACCESS_TOKEN_SECRET=your-access-token-secret
ACCESS_TOKEN_EXPIRE_TIME=1h # Adjust as needed
REFRESH_TOKEN_SECRET=your-refresh-token-secret
REFRESH_TOKEN_EXPIRE_TIME=7d # Adjust as needed
TOKEN_ISSUER=your-issuer

# Database
DB_HOST=mongo
DB_PORT=27017
DB_NAME=nest
DB_CLIENT_PORT=5005
DB_DIRECT_URL=
DB_USERNAME=
DB_PASSWORD=
DB_AUTH_SOURCE=
DB_REPLICA_SET=
DB_MAX_POOL_SIZE=
DB_MIN_POOL_SIZE=
DB_CONNECTION_TIMEOUT_MS=
DB_SOCKET_TIMEOUT_MS=
DB_RETRY_WRITES=
DB_W_CONCERN=
DB_W_TIMEOUT_MS=

# Test Database
TEST_DB_HOST=mongo
TEST_DB_PORT=27017
TEST_DB_NAME=test-db
TEST_DB_USERNAME=
TEST_DB_PASSWORD=

# Cache
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_EXT_PORT=5079
REDIS_TOKEN_EXPIRE_TIME=31536000 # 1 year in seconds (validity for refresh token)
REDIS_BLACKLIST_EXPIRE_TIME=2592000 # 1 month in seconds
REDIS_TLS=false
REDIS_PASSWORD=

# MinIO
MINIO_HOST=minio
MINIO_ACCESS_KEY=minio-access-key
MINIO_SECRET_KEY=minio-secret-key
MINIO_API_PORT=9000
MINIO_CONSOLE_PORT=9001
MINIO_EXT_API_PORT=5500 # For external access
MINIO_EXT_CONSOLE_PORT=5050 # For external access
MINIO_USE_SSL=false

# Mail
MAIL_TEMPLATES_PATH=templates

# Maildev
MAILDEV_HOST=maildev
MAILDEV_PORT=1025
MAILDEV_WEBAPP_PORT=1080
MAILDEV_EXT_PORT=5025
MAILDEV_EXT_WEBAPP_PORT=5080

# SMTP (for production)
SMTP_HOST=smtp.example.com
SMTP_PORT=587
SMTP_USER=your-smtp-username
SMTP_PASS=your-smtp-password

# Mail Senders
FROM_EMAIL=no-reply@myapp.com
FROM_NAME="Your Service Name"

# Rate Limiting
RATE_LIMIT_WINDOW_MS=900000  # 15 minutes in milliseconds
RATE_LIMIT_MAX=100  # 100 requests per windowMs
RATE_LIMIT_EXCLUDE_PATHS=/checker/admin/queues  # Comma-separated list of paths to exclude

# Bruteforce
BRUTE_FORCE_FREE_RETRIES=5
BRUTE_FORCE_MIN_WAIT=300000 # 5 minutes in milliseconds
BRUTE_FORCE_MAX_WAIT=3600000 # 1 hour in milliseconds
BRUTE_FORCE_LIFETIME=86400 # 1 day in seconds

# Bcrypt
BCRYPT_SALT_ROUNDS=10

# Session
SESSION_SECRET=your-session-secret

# View engine
VIEW_ENGINE=njk
VIEW_VIEWS_DIR=views
VIEW_PUBLIC_DIR=public

# OTP
OTP_LENGTH=6
OTP_EXPIRATION=15  # minutes

# Email Queue Configuration
EMAIL_QUEUE_NAME=email-queue
EMAIL_QUEUE_CONCURRENCY=3
EMAIL_QUEUE_RATE_LIMIT_MAX=50
EMAIL_QUEUE_RATE_LIMIT_DURATION=1000
EMAIL_QUEUE_JOB_ATTEMPTS=3
EMAIL_QUEUE_BACKOFF_TYPE=exponential
EMAIL_QUEUE_BACKOFF_DELAY=1000
EMAIL_QUEUE_JOB_TIMEOUT=30000
EMAIL_QUEUE_KEEP_COMPLETED_AGE=86400
EMAIL_QUEUE_KEEP_COMPLETED_COUNT=1000
EMAIL_QUEUE_KEEP_FAILED_AGE=604800
EMAIL_QUEUE_CHECK_INTERVAL=300000
EMAIL_QUEUE_MAX_STALL_COUNT=2

# Queue Admin UI
QUEUE_ADMIN_ENABLED=true
QUEUE_ADMIN_PATH=/checker/admin/queues
QUEUE_ADMIN_USERNAME=admin
QUEUE_ADMIN_PASSWORD=admin

# DISK STORAGE
DISK_STORAGE_UPLOAD_FOLDER=/home/files

# API Configuration
APP_URL=http://localhost:5095
API_PREFIX=/api/v1
AUTH_PREFIX=/auth
OAUTH_PREFIX=/oauth

# OAuth Configuration
# Set to true to allow creating new accounts via OAuth, false to only allow login for existing accounts
OAUTH_ALLOW_AUTO_REGISTRATION=true

# Google OAuth
OAUTH_GOOGLE_ENABLED=false
OAUTH_GOOGLE_CLIENT_ID=
OAUTH_GOOGLE_CLIENT_SECRET=
# Optional: Override the default callback URL
# OAUTH_GOOGLE_CALLBACK_URL=http://localhost:5095/custom/path/google/callback

# Facebook OAuth
OAUTH_FACEBOOK_ENABLED=false
OAUTH_FACEBOOK_CLIENT_ID=
OAUTH_FACEBOOK_CLIENT_SECRET=
# Optional: Override the default callback URL
# OAUTH_FACEBOOK_CALLBACK_URL=http://localhost:5095/custom/path/facebook/callback

# GitHub OAuth
OAUTH_GITHUB_ENABLED=false
OAUTH_GITHUB_CLIENT_ID=
OAUTH_GITHUB_CLIENT_SECRET=
# Optional: Override the default callback URL
# OAUTH_GITHUB_CALLBACK_URL=http://localhost:5095/custom/path/github/callback