env.example

# OpenLIT Environment Configuration
# Copy this file to .env and customize the values for your deployment

# =============================================================================
# Database Configuration
# =============================================================================
OPENLIT_DB_NAME=openlit
OPENLIT_DB_USER=default
OPENLIT_DB_PASSWORD=OPENLIT

# =============================================================================
# Application Configuration
# =============================================================================
PORT=3000
DOCKER_PORT=3000

# Edition mode for shared OSS/Enterprise contracts.
# OSS contains feature metadata and disabled-feature responses only.
# Paid implementations live in the private Enterprise repository.
OPENLIT_EDITION=oss

# =============================================================================
# OAuth Configuration (Optional)
# =============================================================================
# Google OAuth
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=

# GitHub OAuth
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=

# =============================================================================
# OpAMP Server Configuration
# =============================================================================

# Environment Mode
# Options: development, production, testing
# - development: Relaxed security, insecure_skip_verify=true by default
# - production: Strict security, full certificate verification, mutual TLS
# - testing: Similar to development, optimized for automated testing
# Default: production (secure by default)
OPAMP_ENVIRONMENT=production

# TLS Configuration
# Skip certificate verification (development only)
# Set to false for production with proper CA certificates
# Default: false (secure by default)
OPAMP_TLS_INSECURE_SKIP_VERIFY=false

# Require client certificates for mutual TLS
# Enabled by default for enhanced security
# Default: true (secure by default)
OPAMP_TLS_REQUIRE_CLIENT_CERT=true

# TLS Version Configuration
# Minimum and maximum TLS versions (1.0, 1.1, 1.2, 1.3)
OPAMP_TLS_MIN_VERSION=1.2
OPAMP_TLS_MAX_VERSION=1.3

# Logging Configuration
# Options: debug, info, warn, error
OPAMP_LOG_LEVEL=info

# =============================================================================
# Certificate Configuration (Advanced)
# =============================================================================
# Certificate directory path (usually managed by Docker)
# OPAMP_CERTS_DIR=/app/opamp/certs

# =============================================================================
# Production Deployment Example (Default)
# =============================================================================
# Production settings are now the default for enhanced security:
#
# OPAMP_ENVIRONMENT=production                 # Default
# OPAMP_TLS_INSECURE_SKIP_VERIFY=false       # Default
# OPAMP_TLS_REQUIRE_CLIENT_CERT=true         # Default
# OPAMP_TLS_MIN_VERSION=1.2                  # Default
# OPAMP_TLS_MAX_VERSION=1.3                  # Default
# OPAMP_LOG_LEVEL=info                       # Default

# =============================================================================
# Development Deployment Example
# =============================================================================
# For development, override these settings for relaxed security:
#
# OPAMP_ENVIRONMENT=development
# OPAMP_TLS_INSECURE_SKIP_VERIFY=true
# OPAMP_TLS_REQUIRE_CLIENT_CERT=false
# OPAMP_LOG_LEVEL=debug