.env.example

# SecuScan Environment Configuration
# Copy this file to `.env` and adjust values for your local setup.

# Backend Settings
SECUSCAN_DEBUG=true
SECUSCAN_LOG_LEVEL=INFO
SECUSCAN_BIND_ADDRESS=127.0.0.1
SECUSCAN_BIND_PORT=8000

# Storage and Cache
# SECUSCAN_DATABASE_PATH=backend/data/secuscan.db
# SECUSCAN_REDIS_URL=redis://127.0.0.1:6379/0
# SECUSCAN_CACHE_TTL_SECONDS=30

# Docker Support
SECUSCAN_DOCKER_ENABLED=false

# Security Defaults
SECUSCAN_SAFE_MODE_DEFAULT=true
SECUSCAN_REQUIRE_CONSENT=true
SECUSCAN_ALLOW_LOOPBACK_SCANS=true
# SECUSCAN_ALLOWED_NETWORKS=127.0.0.1,192.168.*.*,10.*.*.*,172.16.*.*
# SECUSCAN_CORS_ALLOWED_ORIGINS=http://127.0.0.1:5173,http://localhost:5173

# Optional Plugin Security
# SECUSCAN_PLUGIN_SIGNATURE_KEY=replace-with-your-signing-key
# SECUSCAN_ENFORCE_PLUGIN_SIGNATURES=false
# SECUSCAN_VAULT_KEY=replace-with-a-stable-local-secret

# Frontend Overrides
# Leave these unset for the default local dev flow.
# VITE_API_PROXY_TARGET=http://127.0.0.1:8000
# VITE_API_BASE=http://127.0.0.1:8000/api/v1