Cipher-tube/.env.example at main · ightevenmckane187/Cipher-tube · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
# General
NODE_ENV=development
LOG_LEVEL=debug

# Cipher-Tube Gateway — Zero-Knowledge Validation Layer
GATEWAY_PORT=8080
REDIS_HOST=127.0.0.1
REDIS_PORT=6379
REDIS_POOL_SIZE=10

# Sentinel — Security Pillar
SENTINEL_PORT=3001
SENTINELMTLSCERT_PATH=./certs/sentinel.crt
SENTINELMTLSKEY_PATH=./certs/sentinel.key
SENTINELCACERT_PATH=./certs/ca.crt

# Ed25519 identity token settings
SENTINELTOKENTTL_SECONDS=3600
SENTINELTOKENISSUER=cipher-tube-sentinel

# Secrets manager (development uses local file, production uses vault)
SECRETS_MANAGER=local
# VAULT_ADDR=https://vault.cipher-tube.dev:8200
# VAULT_TOKEN=<your-vault-token>

# Bolt — Performance Pillar
BOLT_PORT=3002
BOLTBENCHMARKBASELINE=./benchmarks/baseline.json
BOLTP99THRESHOLD_PCT=10
BOLTP95THRESHOLD_PCT=5
BOLTMEMORYTHRESHOLD_PCT=15

# Palette — UX/Accessibility Pillar
PALETTE_PORT=3003
PALETTESTORYBOOKPORT=6006

# Tube Layer — Inter-Pillar Transport
TUBE_PORT=3000
TUBETLSVERSION=1.3
TUBEMTLSENABLED=true
TUBECERTROTATION_HOURS=24

# OPA — Policy Engine
OPA_ENDPOINT=http://localhost:8181
OPAPOLICIESPATH=./governance/policies

# Database (if applicable)
# DB_HOST=localhost
# DB_PORT=5432
# DBNAME=ciphertubedev
# DB_USER=ciphertube
# DB_PASSWORD=<set-in-env>

# Observability
OTELEXPORTEROTLP_ENDPOINT=http://localhost:4318
OTELSERVICENAME=cipher-tube
AUDITCHAINPATH=./sentinel/audit/chain.json