iterbot/.env.production.example at master · ErickBonruque/iterbot · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
# ============================================================================
# IterBot - Production Environment Variables
# ============================================================================
# Copie para .env e preencha com valores reais antes do deploy.
# NUNCA commite o arquivo .env com valores reais!
# ============================================================================

# Django Settings
DEBUG=False
ALLOWED_HOSTS=${DOMAIN},backend
DOMAIN=gosh.sh.utfpr.edu.br
PORTAL_BASE_URL=https://${DOMAIN}

# Database Configuration (PostgreSQL)
POSTGRES_DB=capyvagas
POSTGRES_USER=capyvagas_user
POSTGRES_HOST=db
POSTGRES_PORT=5432

# Redis Configuration
REDIS_URL=redis://redis:6379/0

# WAHA Configuration
WAHA_URL=http://waha:3000
WAHA_SESSION_NAME=default
WAHA_TIMEOUT_SECONDS=5
WAHA_API_KEY=substituir_pela_api_key_real
WAHA_DASHBOARD_USERNAME=admin
WAHA_DASHBOARD_PASSWORD=substituir_pela_senha_real
WHATSAPP_SWAGGER_USERNAME=swagger
WHATSAPP_SWAGGER_PASSWORD=substituir_pela_senha_real

# Bot Dashboard Credentials
BOT_DASHBOARD_USERNAME=admin
BOT_DASHBOARD_PASSWORD=substituir_pela_senha_real

# Django Admin
DJANGO_ADMIN_USERNAME=admin
DJANGO_ADMIN_PASSWORD=substituir_pela_senha_real

# Email Configuration (Brevo)
# Provider principal e-mails transacionais (confirmacao, reset, bot).
# A chave real vai em secrets/brevo_api_key.txt (Docker secret).
# Sender em DEFAULT_FROM_EMAIL precisa estar verificado no dashboard Brevo.
EMAIL_PROVIDER=brevo
EMAIL_FALLBACK_PROVIDER=
DEFAULT_FROM_EMAIL=substituir_pelo_email_remetente_verificado
# EMAIL_BACKEND so e atingido em caminhos residuais (mail_admins etc.).
EMAIL_BACKEND=django.core.mail.backends.console.EmailBackend
# Destinatario de alertas operacionais (fallback: DEFAULT_FROM_EMAIL)
ALERT_EMAIL=

# Backup S3 Configuration (legado AWS — opcional; scripts de backup local nao dependem disso)
S3_BACKUP_BUCKET=
S3_BACKUP_PREFIX=daily

# Security: Secrets sao lidos de ./secrets/*.txt
# Veja: deployment/scripts/setup_secrets.sh

# BasicAuth (Traefik) — WAHA Dashboard and Django Admin portal
# These credentials are used by setup-htpasswd.sh to generate htpasswd files
# for Traefik's BasicAuth middleware on protected routes.
# WAHA_DASHBOARD_USERNAME and WAHA_DASHBOARD_PASSWORD above are reused here.
# DJANGO_ADMIN_USERNAME and DJANGO_ADMIN_PASSWORD above are reused here.
# Run: ./deployment/scripts/setup-htpasswd.sh

# ============================================================================
# Gunicorn (backend) — tuning para o host gosh (1 vCPU / 1.8 GB)
# ============================================================================
# Defaults do start.sh: 2 workers x 4 threads (gthread), timeout 60s.
# Só defina aqui para sobrescrever sem rebuild da imagem. Se a RAM apertar,
# GUNICORN_WORKERS=1 mantém a concorrência via threads com metade da memória.
# GUNICORN_WORKERS=2
# GUNICORN_THREADS=4
# GUNICORN_TIMEOUT=60