rack-gateway/mise.toml at main · DocSpring/rack-gateway · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
[tools]
go = "1.26.2"
node = "22.19.0"
bun = "1.3.1"

[env]
# PORT CONFIGURATION - SINGLE SOURCE OF TRUTH
GATEWAY_PORT = "8447"
WEB_PORT = "5223"
MOCK_OAUTH_PORT = "3345"
MOCK_CONVOX_PORT = "5443"
TEST_GATEWAY_PORT = "9447"
TEST_MOCK_OAUTH_PORT = "9345"
TEST_MOCK_CONVOX_PORT = "6443"

# Application configuration
DEV_MODE = "true"
LOG_LEVEL = "debug"
DOMAIN = "localhost"
# Note: PORT is set explicitly in Procfile.dev from GATEWAY_PORT, WEB_PORT, etc.
# Never set PORT directly here - Overmind auto-assigns it which causes conflicts.

# Web dev server (for local Procfile dev, gateway proxies to this)
WEB_DEV_SERVER_URL = "http://localhost:5223"

# Rate limiting (relaxed for dev)
RATE_LIMIT_RPS = "100"
RATE_LIMIT_BURST = "200"

# OAuth configuration (override in mise.local.toml)
GOOGLE_CLIENT_ID = "mock-client-id"
GOOGLE_CLIENT_SECRET = "mock-client-secret"
GOOGLE_ALLOWED_DOMAIN = "example.com"
GOOGLE_OAUTH_BASE_URL = "http://localhost:3345"

# Secret configuration
APP_SECRET_KEY = "dev-secret-key-change-in-production"

# Mock Convox rack (for development)
RACK = "Dev"
RACK_HOST = "http://localhost:5443"
RACK_TOKEN = "mock-rack-token-12345"
RACK_USERNAME = "convox"
MOCK_CONVOX_LOG_HEADERS = "false"

# Convox secret environment variables (comma-separated list)
CONVOX_SECRET_ENV_VARS = "DATABASE_URL,REDIS_URL,SECRET_KEY_BASE"

# Default RBAC users
ADMIN_USERS = "admin@example.com"
VIEWER_USERS = "viewer@example.com"
DEPLOYER_USERS = "deployer@example.com"
OPERATIONS_USERS = "ops@example.com"

# Postgres for dev/test (Docker compose exposes 55432 by default)
DATABASE_URL = "postgres://postgres:postgres@127.0.0.1:55432/gateway_dev?sslmode=disable"
TEST_DATABASE_URL = "postgres://postgres:postgres@127.0.0.1:55432/gateway_test?sslmode=disable"

# MinIO (S3-compatible local storage for dev)
AWS_ENDPOINT_URL_S3 = "http://localhost:9000"
AWS_ACCESS_KEY_ID = "minioadmin"
AWS_SECRET_ACCESS_KEY = "minioadmin"
AWS_REGION = "us-east-1"

# WORM Audit Anchors (writes to MinIO in dev)
AUDIT_ANCHOR_BUCKET = "audit-anchors"
AUDIT_ANCHOR_CHAIN_ID = "dev"
AUDIT_ANCHOR_RETENTION_DAYS = "400"
AUDIT_ANCHOR_INTERVAL_MINUTES = "1"  # Every minute for dev testing (default: 60 = 1 hour)

# Config directory for CLI (stores config.json with tokens and rack settings)
# GATEWAY_CLI_CONFIG_DIR = "./config/cli"