InvernaderosAPI/.env.example at develop · apptolast/InvernaderosAPI · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
# ============================================
# InvernaderosAPI - Environment Variables Template
# ============================================
# Copy this file to .env and fill in the actual values
# NEVER commit the .env file to version control
# ============================================

# ============================================
# Database Credentials
# ============================================

# TimescaleDB (Time-series Database)
TIMESCALE_DB_NAME=greenhouse_timeseries
TIMESCALE_USER=admin
# NOTE: TIMESCALE_PASSWORD is used by both the TimescaleDB container and the API container.
TIMESCALE_PASSWORD=<your_secure_password_here>

# PostgreSQL Metadata Database
METADATA_DB_NAME=greenhouse_metadata
METADATA_USER=admin
# NOTE: METADATA_PASSWORD is used by both the PostgreSQL container and the API container.
METADATA_PASSWORD=<your_secure_password_here>

# ============================================
# Redis Cache
# ============================================
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_PASSWORD=<your_secure_password_here>

# ============================================
# MQTT Broker (EMQX)
# ============================================
MQTT_BROKER_URL=tcp://emqx:1883
MQTT_USERNAME=<your_mqtt_username>
MQTT_PASSWORD=<your_mqtt_password>
MQTT_CLIENT_ID_PREFIX=api_local_001

# EMQX Dashboard Credentials
EMQX_DASHBOARD_USERNAME=admin
EMQX_DASHBOARD_PASSWORD=<your_emqx_dashboard_password>

# ============================================
# Spring Boot Configuration
# ============================================
SPRING_PROFILES_ACTIVE=local

# JVM Options
JAVA_OPTS=-Xms256m -Xmx512m

# ============================================
# Production/Development Specific
# ============================================
# For production environments, use stronger passwords
# and different credentials for each environment

# Production Database Credentials
# TIMESCALE_DB_NAME=greenhouse_timeseries
# METADATA_DB_NAME=greenhouse_metadata

# Development Database Credentials
# TIMESCALE_DB_NAME=greenhouse_timeseries_dev
# METADATA_DB_NAME=greenhouse_metadata_dev

# ============================================
# Security Notes
# ============================================
# 1. Generate strong passwords using: openssl rand -base64 32
# 2. Use different passwords for each environment
# 3. Rotate credentials regularly
# 4. Never share credentials in chat, email, or documentation
# 5. Use secret managers in production (e.g., AWS Secrets Manager, HashiCorp Vault)