65 lines
2.3 KiB
Text
65 lines
2.3 KiB
Text
# Environment variables
|
|
# Copy this file to .env and adjust as needed: cp .env.example .env
|
|
|
|
SECRET_KEY="django-insecure-dev-key-please-change-in-production"
|
|
ENV_TYPE="dev"
|
|
DEBUG=True
|
|
DOMAIN_NAME="http://localhost:8000"
|
|
|
|
# The web app's base URL. Every link this system emails is built from it: the
|
|
# magic-link sign-in URL, the customer's invoice and estimate portal links, the
|
|
# CSAT survey, and the internal "assigned to you" notifications. Outside dev
|
|
# (ENV_TYPE other than "dev") a loopback value is refused at startup, because
|
|
# left at this default it mails customers a link to their own machine.
|
|
FRONTEND_URL="http://localhost:5181"
|
|
|
|
# AWS (only needed for production / S3 storage)
|
|
AWS_BUCKET_NAME=""
|
|
AWS_ACCESS_KEY_ID=""
|
|
AWS_SECRET_ACCESS_KEY=""
|
|
AWS_SES_REGION_NAME=""
|
|
AWS_SES_REGION_ENDPOINT=""
|
|
|
|
# DB
|
|
DBNAME="crm_db"
|
|
DBUSER="postgres"
|
|
DBPASSWORD="postgres"
|
|
DBHOST="localhost"
|
|
DBPORT="5432"
|
|
|
|
# Sentry (optional)
|
|
SENTRY_DSN=""
|
|
|
|
# Celery
|
|
CELERY_BROKER_URL="redis://localhost:6379/0"
|
|
CELERY_RESULT_BACKEND="redis://localhost:6379/0"
|
|
|
|
# Google OAuth (optional: leave blank to disable)
|
|
GOOGLE_CLIENT_ID=""
|
|
GOOGLE_CLIENT_SECRET=""
|
|
|
|
# Email (use "django.core.mail.backends.console.EmailBackend" for dev, "django_ses.SESBackend" for AWS SES)
|
|
EMAIL_BACKEND="django.core.mail.backends.console.EmailBackend"
|
|
DEFAULT_FROM_EMAIL="noreply@localhost"
|
|
ADMIN_EMAIL="admin@localhost"
|
|
|
|
ALLOWED_HOSTS=localhost,127.0.0.1
|
|
CORS_ALLOWED_ORIGINS=http://localhost:5181,http://127.0.0.1:5181
|
|
CSRF_TRUSTED_ORIGINS=http://localhost:5181
|
|
|
|
# Set to True only when TLS is terminated by a proxy in front of Django and that
|
|
# proxy is the only way in. It makes Django trust X-Forwarded-Proto, which is
|
|
# what lets the HSTS settings emit a header at all. Leave False for direct HTTP
|
|
# or the header becomes something any caller can forge.
|
|
TRUST_PROXY_SSL_HEADER=False
|
|
|
|
# Shared cache. Required in production for DRF throttling to be enforced across
|
|
# workers rather than per process. Without it the public web form rate limits
|
|
# are per gunicorn worker and reset on restart.
|
|
CACHE_URL=""
|
|
|
|
# Public web form submission limits (issue #634). The first is per client IP
|
|
# per form; the second is per form across all clients and is the layer that
|
|
# X-Forwarded-For rotation cannot evade.
|
|
WEBFORM_THROTTLE_IP="10/hour"
|
|
WEBFORM_THROTTLE_GLOBAL="200/day"
|