mirror of
https://github.com/elyby/accounts.git
synced 2026-10-20 20:58:03 +05:30
78 lines
2.8 KiB
Bash
78 lines
2.8 KiB
Bash
# Application params
|
||
## Application environment
|
||
YII_DEBUG=true
|
||
YII_ENV=dev
|
||
DOMAIN=http://localhost
|
||
AUTHSERVER_HOST=authserver.ely.by
|
||
EMAILS_RENDERER_HOST=http://emails-renderer:3000
|
||
|
||
## Security params
|
||
JWT_ENCRYPTION_KEY=thisisadummyvalue32latterslength
|
||
JWT_PRIVATE_KEY_PATH=
|
||
JWT_PRIVATE_KEY_PASS=
|
||
|
||
## External services
|
||
CHRLY_HOST=skinsystem.ely.by
|
||
# Google reCAPTCHA (Google Cloud edition). Checkbox site key, API key and Google Cloud project id
|
||
RECAPTCHA_PUBLIC=
|
||
RECAPTCHA_SECRET=
|
||
RECAPTCHA_PROJECT_ID=
|
||
# Yandex SmartCaptcha. Leave empty to disable
|
||
YANDEX_CAPTCHA_CLIENT_KEY=
|
||
YANDEX_CAPTCHA_SERVER_KEY=
|
||
# ALTCHA (self-hosted proof-of-work captcha). Leave the secrets empty to disable.
|
||
# Both secrets are required, must be random strings at least 32 bytes long and differ from each other
|
||
ALTCHA_HMAC_SECRET=
|
||
ALTCHA_HMAC_KEY_SECRET=
|
||
# Difficulty: the server calculates the KDF once with ALTCHA_COST per challenge,
|
||
# while the client's work is ALTCHA_COST × counter, where counter is random in [MIN, MAX]
|
||
#
|
||
# Tuning under attack: raise the counter range, not the cost. The cost affects both the server and
|
||
# the client, while the counter affects only the client. Keep ALTCHA_COST within 1000-5000
|
||
# (~0.1-0.6 ms of server CPU per challenge). Client time estimates (average counter × cost iterations,
|
||
# single thread; a weak Android device is assumed to be ~8x slower than a desktop):
|
||
# normal: COST=1000, COUNTER 500-1500 ~1M iterations, ~0.1 s desktop, ~1 s weak phone
|
||
# elevated: COST=1000, COUNTER 2000-6000 ~4M iterations, ~0.5 s desktop, ~4 s weak phone
|
||
# siege: COST=1000, COUNTER 5000-15000 ~10M iterations, ~1.2 s desktop, ~10 s weak phone
|
||
# Going beyond "siege" hurts real mobile users more than bots: at that point switch the users to the paid
|
||
# captchas instead (e.g. disable ALTCHA by emptying ALTCHA_HMAC_SECRET, the frontend falls back to the next
|
||
# provider). PoW only makes each attempt more expensive, a botnet with enough CPU still gets through.
|
||
# New values apply to new challenges only, already issued ones remain valid until ALTCHA_TTL expires.
|
||
ALTCHA_COST=1000
|
||
ALTCHA_COUNTER_MIN=500
|
||
ALTCHA_COUNTER_MAX=1500
|
||
# Challenge lifetime in seconds
|
||
ALTCHA_TTL=600
|
||
SENTRY_DSN=
|
||
|
||
## SMTP params
|
||
SMTP_HOST=
|
||
SMTP_PORT=
|
||
SMTP_USER=
|
||
SMTP_PASS=
|
||
SMTP_ENCRYPTION=
|
||
|
||
## MariaDB connection params
|
||
DB_HOST=db
|
||
DB_DATABASE=ely_accounts
|
||
DB_USER=ely_accounts_user
|
||
DB_PASSWORD=ely_accounts_password
|
||
|
||
## Redis connection params
|
||
REDIS_HOST=redis
|
||
REDIS_PORT=6379
|
||
REDIS_DATABASE=0
|
||
REDIS_PASSWORD=
|
||
|
||
## StatsD metrics params
|
||
STATSD_HOST=
|
||
STATSD_PORT=8125
|
||
# This value can be blank
|
||
STATSD_NAMESPACE=
|
||
|
||
## Xdebug configuration params
|
||
XDEBUG_CONFIG=remote_host=10.254.254.254
|
||
# Use the next line if you're using Docker on Windows or Mac:
|
||
# XDEBUG_CONFIG=remote_host=host.docker.internal
|
||
PHP_IDE_CONFIG=serverName=accounts-elyby
|