Some checks failed
CI/CD Pipeline / Generate SBOM (push) Has been cancelled
CI/CD Pipeline / Deploy to Staging (push) Has been cancelled
CI/CD Pipeline / Deploy to Production (push) Has been cancelled
CI/CD Pipeline / Code Quality & Linting (push) Has been cancelled
CI/CD Pipeline / Policy Validation (push) Has been cancelled
CI/CD Pipeline / Test Suite (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-coverage) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-extract) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-firm-connectors) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-forms) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-hmrc) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-ingestion) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-kg) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-normalize-map) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-ocr) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-rag-indexer) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-rag-retriever) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-reason) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (svc-rpa) (push) Has been cancelled
CI/CD Pipeline / Build Docker Images (ui-review) (push) Has been cancelled
CI/CD Pipeline / Security Scanning (svc-coverage) (push) Has been cancelled
CI/CD Pipeline / Security Scanning (svc-extract) (push) Has been cancelled
CI/CD Pipeline / Security Scanning (svc-kg) (push) Has been cancelled
CI/CD Pipeline / Security Scanning (svc-rag-retriever) (push) Has been cancelled
CI/CD Pipeline / Security Scanning (ui-review) (push) Has been cancelled
CI/CD Pipeline / Notifications (push) Has been cancelled
108 lines
2.4 KiB
Plaintext
108 lines
2.4 KiB
Plaintext
# FILE: infra/compose/env.example
|
|
|
|
# Domain Configuration
|
|
DOMAIN=local.lan
|
|
EMAIL=admin@local.lan
|
|
|
|
# Database Passwords
|
|
POSTGRES_PASSWORD=postgres
|
|
NEO4J_PASSWORD=neo4jpass
|
|
AUTHENTIK_DB_PASSWORD=authentik
|
|
|
|
# Object Storage
|
|
MINIO_ROOT_USER=minio
|
|
MINIO_ROOT_PASSWORD=miniopass
|
|
MINIO_ACCESS_KEY=minio
|
|
MINIO_SECRET_KEY=miniopass
|
|
|
|
# Vector Database
|
|
QDRANT__SERVICE__GRPC_PORT=6334
|
|
|
|
# Secrets Management
|
|
VAULT_DEV_ROOT_TOKEN_ID=root
|
|
|
|
# Identity & SSO
|
|
AUTHENTIK_SECRET_KEY=changeme
|
|
AUTHENTIK_OUTPOST_TOKEN=changeme
|
|
AUTHENTIK_BOOTSTRAP_EMAIL=admin@local.lan
|
|
AUTHENTIK_BOOTSTRAP_PASSWORD=admin123
|
|
# AUTHENTIK_BOOTSTRAP_TOKEN: This value will be automatically updated after the initial setup.
|
|
AUTHENTIK_BOOTSTRAP_TOKEN=
|
|
|
|
# Monitoring
|
|
GRAFANA_PASSWORD=admin
|
|
GRAFANA_OAUTH_CLIENT_ID=grafana
|
|
GRAFANA_OAUTH_CLIENT_SECRET=changeme
|
|
|
|
# OAuth Client Secrets for Authentik Providers
|
|
AUTHENTIK_API_CLIENT_SECRET=changeme-api-secret
|
|
AUTHENTIK_UI_REVIEW_CLIENT_SECRET=changeme-ui-review-secret
|
|
AUTHENTIK_GRAFANA_CLIENT_SECRET=changeme-grafana-secret
|
|
AUTHENTIK_MINIO_CLIENT_SECRET=changeme-minio-secret
|
|
AUTHENTIK_VAULT_CLIENT_SECRET=changeme-vault-secret
|
|
|
|
# Feature Flags
|
|
UNLEASH_ADMIN_TOKEN=development.unleash-insecure-admin-api-token
|
|
|
|
# Application Configuration
|
|
NEXTAUTH_SECRET=changeme
|
|
|
|
# RAG & ML Models
|
|
RAG_EMBEDDING_MODEL=bge-small-en-v1.5
|
|
RAG_RERANKER_MODEL=cross-encoder/ms-marco-MiniLM-L-6-v2
|
|
RAG_ALPHA_BETA_GAMMA=0.5,0.3,0.2
|
|
|
|
# HMRC Integration
|
|
HMRC_MTD_ITSA_MODE=sandbox
|
|
|
|
# Rate Limits
|
|
RATE_LIMITS_HMRC_API_RPS=3
|
|
RATE_LIMITS_HMRC_API_BURST=6
|
|
RATE_LIMITS_LLM_API_RPS=10
|
|
RATE_LIMITS_LLM_API_BURST=20
|
|
|
|
# Confidence Thresholds
|
|
CONFIDENCE_AUTO_SUBMIT=0.95
|
|
CONFIDENCE_HUMAN_REVIEW=0.85
|
|
CONFIDENCE_REJECT=0.50
|
|
|
|
# Logging
|
|
LOG_LEVEL=INFO
|
|
LOG_FORMAT=json
|
|
|
|
# Development Settings
|
|
DEBUG=false
|
|
DEVELOPMENT_MODE=true
|
|
|
|
# Security
|
|
ENCRYPTION_KEY_ID=default
|
|
AUDIT_LOG_RETENTION_DAYS=90
|
|
PII_LOG_RETENTION_DAYS=30
|
|
|
|
# Backup & DR
|
|
BACKUP_ENABLED=true
|
|
BACKUP_SCHEDULE="0 2 * * *"
|
|
BACKUP_RETENTION_DAYS=30
|
|
|
|
# Performance Tuning
|
|
MAX_WORKERS=4
|
|
BATCH_SIZE=100
|
|
CACHE_TTL_SECONDS=3600
|
|
CONNECTION_POOL_SIZE=20
|
|
|
|
# Feature Flags
|
|
FEATURE_RAG_ENABLED=true
|
|
FEATURE_FIRM_CONNECTORS_ENABLED=false
|
|
FEATURE_HMRC_SUBMISSION_ENABLED=false
|
|
FEATURE_ADVANCED_CALCULATIONS_ENABLED=true
|
|
|
|
# Event Bus Configuration
|
|
EVENT_BUS_TYPE=memory
|
|
KAFKA_BOOTSTRAP_SERVERS=
|
|
|
|
# NATS Configuration
|
|
NATS_SERVERS=nats://nats:4222
|
|
NATS_STREAM_NAME=TAX_AGENT_EVENTS
|
|
NATS_CONSUMER_GROUP=tax-agent
|
|
NATS_LOG_LEVEL=info
|