mirror of
https://github.com/9technologygroup/patchmon.net.git
synced 2025-10-27 10:03:45 +00:00
d379473568
Added profile session management Added "Remember me" to bypass TFA using device fingerprint Fixed profile name not being persistent after logout and login
39 lines
868 B
Plaintext
39 lines
868 B
Plaintext
# Database Configuration
|
|
DATABASE_URL="postgresql://patchmon_user:p@tchm0n_p@55@localhost:5432/patchmon_db"
|
|
PM_DB_CONN_MAX_ATTEMPTS=30
|
|
PM_DB_CONN_WAIT_INTERVAL=2
|
|
|
|
# Server Configuration
|
|
PORT=3001
|
|
NODE_ENV=development
|
|
|
|
# API Configuration
|
|
API_VERSION=v1
|
|
CORS_ORIGIN=http://localhost:3000
|
|
|
|
# Rate Limiting (times in milliseconds)
|
|
RATE_LIMIT_WINDOW_MS=900000
|
|
RATE_LIMIT_MAX=5000
|
|
AUTH_RATE_LIMIT_WINDOW_MS=600000
|
|
AUTH_RATE_LIMIT_MAX=500
|
|
AGENT_RATE_LIMIT_WINDOW_MS=60000
|
|
AGENT_RATE_LIMIT_MAX=1000
|
|
|
|
# Logging
|
|
LOG_LEVEL=info
|
|
ENABLE_LOGGING=true
|
|
|
|
# User Registration
|
|
DEFAULT_USER_ROLE=user
|
|
|
|
# JWT Configuration
|
|
JWT_SECRET=your-secure-random-secret-key-change-this-in-production
|
|
JWT_EXPIRES_IN=1h
|
|
JWT_REFRESH_EXPIRES_IN=7d
|
|
SESSION_INACTIVITY_TIMEOUT_MINUTES=30
|
|
|
|
# TFA Configuration
|
|
TFA_REMEMBER_ME_EXPIRES_IN=30d
|
|
TFA_MAX_REMEMBER_SESSIONS=5
|
|
TFA_SUSPICIOUS_ACTIVITY_THRESHOLD=3
|