basis/config/defaults.py
apeters 36e606693b Users & Groups fixes/changes
Signed-off-by: apeters <apeters@korves.net>
2025-05-23 08:47:10 +00:00

40 lines
1.4 KiB
Python

import os
from pydantic import constr
ACCEPT_LANGUAGES = ["en", "de"]
WEBAUTHN_CHALLENGE_TIMEOUT = 30 # seconds
AUTH_REQUEST_TIMEOUT = 300 # seconds
REGISTER_REQUEST_TIMEOUT = 300 # seconds
TABLE_PAGE_SIZE = 20
TRUSTED_PROXIES = ["127.0.0.1", "::1"]
TEMPLATES_AUTO_RELOAD = True
SEND_FILE_MAX_AGE_DEFAULT = 31536000
USER_ACLS = ["user", "system"]
DISABLE_CACHE = False
LOG_LEVEL = "DEBUG"
LOG_FILE_RETENTION = 3
LOG_FILE_ROTATION = 5 # MiB
PRESERVE_SESSION_KEYS = []
HYPERCORN_BIND = "162.55.49.111:443"
HOSTNAME = "gyst.debinux.de"
WEBAUTHN_RP_NAME = "gyst" # The human-readable RP name the server will report
WEBAUTHN_RP_ID = HOSTNAME # Should be the effective domain
WEBAUTHN_RP_ORIGIN = HOSTNAME # Origins the server will accept requests from
SECRET_KEY = os.getenv("SESSION_SECRET", "im-insecure") # can be overridden by env var
TLS_CERTFILE = "system/certs/fullchain.pem"
TLS_KEYFILE = "system/certs/privkey.pem"
TLS_CA = "/etc/ssl/certs/ca-certificates.crt"
CLUSTER_PEERS = [
{"name": "de.kerker.io", "ip4": "2.58.53.49", "nat_ip4": "45.86.125.5"},
{"name": "debian-4gb-nbg1-2", "ip4": "162.55.49.111", "is_self": True},
{"name": "arm-2", "ip4": "37.27.93.56"},
{"name": "4th", "ip4": "188.245.202.111"},
]
CLUSTER_CLI_BINDINGS = ["127.0.0.1", "::1"]
CLUSTER_PEERS_TIMEOUT = 1.25
CLUSTER_LOGS_REFRESH_AFTER = 120 # force refresh of remote logs after n seconds
CLUSTER_ENFORCE_DBUPDATE_TIMEOUT = 300
ACCESS_TOKEN_FORMAT = constr(
min_length=16,
)