# Environment Variables

> **Terakhir Diperbarui:** 2026-06-29
> ⚠️ **Jangan commit nilai secret ke repository.** Template ada di `geonet-console/.env.example`.

---

## geonet-console (Laravel 12)

File: `/opt/stacks/geonet-console/.env` di server 10.100.1.24.

### App

| Variable | Contoh | Keterangan |
|----------|--------|------------|
| `APP_NAME` | `Geonet Console` | Nama aplikasi |
| `APP_ENV` | `production` | Environment |
| `APP_KEY` | `base64:...` | **SECRET** — auto-generate jika kosong |
| `APP_URL` | `https://console.gisportal.id` | URL produksi |
| `APP_DEBUG` | `false` | Debug mode (false di production) |

### Database

| Variable | Keterangan |
|----------|------------|
| `DB_CONNECTION` | `pgsql` — **wajib**, jangan ubah ke sqlite |
| `DB_HOST` | `audit-postgres` (container) |
| `DB_PORT` | `5432` |
| `DB_DATABASE` | `databaselist_app` |
| `DB_USERNAME` | `geonet_app` |
| `APP_DB_PASSWORD` | **SECRET** — password PostgreSQL app |
| `AUDIT_DB_DATABASE` | `databaselist_audit` |

### LDAP / Active Directory

| Variable | Keterangan |
|----------|------------|
| `LDAP_HOST` | `10.100.1.40` |
| `LDAP_PORT` | `389` |
| `LDAP_BASE_DN` | `DC=gisportal,DC=id` |
| `LDAP_BIND_DN` | `Administrator@gisportal.id` |
| `LDAP_BIND_PASSWORD` | **SECRET** — password AD bind account |
| `LDAP_ADMIN_GROUPS` | `Domain Admins,Administrators,Enterprise Admins` |

### SQL Server (Registry)

| Variable | Keterangan |
|----------|------------|
| `MSSQL_HOST` | `10.100.1.25` |
| `MSSQL_PORT` | `1433` |
| `MSSQL_DATABASE` | `master` |
| `MSSQL_USERNAME` | `sa` |
| `MSSQL_PASSWORD` | **SECRET** |

### QNAP OSS (Object Storage — Avatar)

| Variable | Keterangan |
|----------|------------|
| `OSS_ENDPOINT` | `http://10.100.1.10:8010` |
| `OSS_ACCESS_KEY_ID` | Format: `<storage-space>:<key-id>` |
| `OSS_SECRET_ACCESS_KEY` | **SECRET** — lihat `.env` di server |
| `OSS_BUCKET` | `super-apps` |
| `OSS_REGION` | `us-east-1` |
| `OSS_PUBLIC_URL` | `https://file.gisportal.id/super-apps` |

### Mail (SMTP)

| Variable | Keterangan |
|----------|------------|
| `MAIL_HOST` | `sc138.idcloudhosting.cloud` |
| `MAIL_PORT` | `465` |
| `MAIL_USERNAME` | `support@geonet.co.id` |
| `MAIL_PASSWORD` | **SECRET** |
| `MAIL_ENCRYPTION` | `ssl` |

### Ollama AI (Fase — Belum aktif)

| Variable | Keterangan |
|----------|------------|
| `OLLAMA_BASE_URL` | `http://10.100.1.26:11434` |
| `OLLAMA_MODEL` | `qwen2.5` |

---

## Lokasi Secret

| Secret | Lokasi |
|--------|--------|
| Semua credentials app | `/opt/stacks/geonet-console/.env` di server 10.100.1.24 |
| PostgreSQL password | `.env` (tidak di repo) |
| LDAP bind password | `.env` (tidak di repo) |
| QNAP OSS secret key | `.env` (tidak di repo) |
| SQL Server password | `.env` (tidak di repo) |
| SSH private keys | `~/.ssh/` di laptop developer |

---

## Template

Gunakan `geonet-console/.env.example` sebagai template — sudah berisi semua variable dengan placeholder aman.