APP_NAME="Geonet Console"

APP_ENV=production

APP_KEY=

APP_DEBUG=false

APP_URL=https://console.gisportal.id

APP_TIMEZONE=Asia/Jakarta



# App metadata DB (PostgreSQL Docker) — SMTP, DB connections, API tokens, OAuth, LDAP meta
# Data persists in Docker volume audit_pg_data (database databaselist_app)

DB_CONNECTION=pgsql

APP_DB_HOST=audit-postgres
APP_DB_PORT=5432
APP_DB_DATABASE=databaselist_app
APP_DB_USERNAME=audit
APP_DB_PASSWORD=audit_secret_change_me



# LDAP JWT expiry for API login (seconds)

API_LDAP_JWT_TTL=3600



SESSION_DRIVER=file

SESSION_LIFETIME=120

SESSION_SECURE_COOKIE=true

SESSION_SAME_SITE=lax



# Login: LDAP domain account (Administrator group required for app access)

# Service account below is for LDAP read/write operations only



MSSQL_HOST=10.100.1.25

MSSQL_PORT=1433

MSSQL_DATABASE=master

MSSQL_USERNAME=sa

MSSQL_PASSWORD=change-me



LDAP_HOST=10.100.1.40

LDAP_PORT=389

LDAP_SSL_PORT=636

LDAP_USE_SSL=false

LDAP_BASE_DN=DC=gisportal,DC=id

LDAP_GROUP_CONTAINER_DN=CN=Users,DC=gisportal,DC=id

LDAP_BIND_DN=Administrator@gisportal.id

LDAP_BIND_PASSWORD=change-me

LDAP_TIMEOUT=10

LDAP_TLS_VERIFY=false

LDAP_ADMIN_GROUPS="Domain Admins,Administrators,Enterprise Admins"



MAIL_MAILER=smtp

MAIL_HOST=sc138.idcloudhosting.cloud

MAIL_PORT=465

MAIL_USERNAME=support@geonet.co.id

MAIL_PASSWORD=change-me

MAIL_ENCRYPTION=ssl

MAIL_FROM_ADDRESS=support@geonet.co.id

MAIL_FROM_NAME="Geonet Support"



# Audit log database (PostgreSQL Docker)

AUDIT_DB_HOST=audit-postgres

AUDIT_DB_PORT=5432

AUDIT_DB_DATABASE=databaselist_audit

AUDIT_DB_USERNAME=audit

AUDIT_DB_PASSWORD=audit_secret_change_me



# Ollama inference (VM 10.100.1.26)
OLLAMA_BASE_URL=http://10.100.1.26:11434
OLLAMA_CHAT_MODEL=qwen2.5:7b
OLLAMA_EMBED_MODEL=nomic-embed-text
OLLAMA_TIMEOUT=120

# Project search index (PostgreSQL 10.100.1.25)
PROJECT_SEARCH_DB_HOST=10.100.1.25
PROJECT_SEARCH_DB_PORT=5432
PROJECT_SEARCH_DB_DATABASE=geonet_project_search
PROJECT_SEARCH_DB_USERNAME=geonet_project
PROJECT_SEARCH_DB_PASSWORD=change-me
PROJECT_SEARCH_DEFAULT_SOURCES=project
PROJECT_SEARCH_OAUTH_CLIENT_ID=a2072649-3215-4701-af9f-d89d13875105
PROJECT_SEARCH_OAUTH_SCOPE=project-search:read



# GeoNetAgent DB sync (PostgreSQL 10.100.1.25)
# Kosongkan GEONETAGENT_DB_USERNAME untuk menonaktifkan sync (safe default)
GEONETAGENT_DB_HOST=10.100.1.25
GEONETAGENT_DB_PORT=5432
GEONETAGENT_DB_DATABASE=geonetagent
GEONETAGENT_DB_USERNAME=
GEONETAGENT_DB_PASSWORD=



# Object Storage — QNAP QuObjects (S3-compatible, port 8010)
# Access key format: <storage-space>:<key-id>
OSS_ACCESS_KEY_ID=super-apps:0Jq7KbF31eJzd4k3LSXN
OSS_SECRET_ACCESS_KEY=change-me
OSS_BUCKET=super-apps
OSS_ENDPOINT=http://10.100.1.10:8010
OSS_REGION=us-east-1
OSS_PUBLIC_URL=http://file.gisportal.id:8010



TZ=Asia/Jakarta



# Zammad ticketing (feedback → auto-create ticket)
ZAMMAD_ENABLED=true
ZAMMAD_BASE_URL=https://zammad.gisportal.id
ZAMMAD_API_TOKEN=
ZAMMAD_DEFAULT_GROUP=Users
ZAMMAD_FALLBACK_CUSTOMER=support@geonet.co.id
ZAMMAD_TIMEOUT=30