initial-commit

.env.example

@@ -0,0 +1,50 @@
+# Charybdis Environment Variables
+# ================================
+#
+# PREFERRED: Use config.toml for configuration (copy from config.toml.example)
+# Environment variables are used ONLY when referenced in config.toml with ${VAR_NAME}
+# or when config.toml is not present (legacy mode)
+#
+# See config.toml.example for the recommended configuration approach
+
+# Database Connection (Required)
+# ===============================
+# Used in config.toml as: url = "${DATABASE_URL}"
+DATABASE_URL=postgresql://charybdis:CHANGE_ME@localhost:5432/charybdis
+
+# Logging Configuration
+# =====================
+RUST_LOG=info,charybdis=debug
+
+# API Keys and Secrets (for plugins)
+# ===================================
+# These should NEVER be stored in config.toml
+# Reference them in config.toml using ${VARIABLE_NAME}
+
+# DefectDojo API Key (if using DefectDojo plugin)
+# DEFECTDOJO_API_KEY=your-secret-api-key
+
+# Dependency-Track API Key (if using Dependency-Track plugin)
+# DEPENDENCYTRACK_API_KEY=your-secret-api-key
+
+# LEGACY: Direct Environment Variable Configuration
+# ==================================================
+# The following variables are only used if config.toml is not found
+# We recommend using config.toml instead for better organization
+
+# Server Configuration
+# GRPC_HOST=[::1]
+# GRPC_PORT=50051
+
+# OpenTelemetry
+# OTEL_SERVICE_NAME=charybdis
+# OTEL_SERVICE_VERSION=0.1.0
+# OTEL_ENABLE_CONSOLE=true
+# ENVIRONMENT=development
+
+# Security (mTLS + RBAC)
+# SECURITY_MTLS_ENABLED=false
+# SECURITY_MTLS_SERVER_CERT=./certs/server-cert.pem
+# SECURITY_MTLS_SERVER_KEY=./certs/server-key.pem
+# SECURITY_MTLS_CLIENT_CA=./certs/ca.pem
+# SECURITY_RBAC_ENABLED=false