-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy path.env.default
191 lines (144 loc) · 6.58 KB
/
.env.default
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
### GLOBAL VARIABLES ###
# If !false, Next's bundle(s) will be analyzed and report files generated.
ANALYZE=false
# This will overwrite the NODE_ENV setting during runtime and for the compiled
# applications.
#
# Recognized values: test development production
# Default value: empty
NODE_ENV=
# MongoDB connect URI. Specify auth credentials if necessary. YOU MUST *NOT*
# SPECIFY A DATABASE AT THE END!
MONGODB_URI=mongodb://127.0.0.1:27017
# Dedicated port to be used by the MongoDB Memory Server during unit tests.
# Especially useful when stepping through code, since you can always access the
# db at `mongodb://127.0.0.1:MONGODB_MS_PORT` when the debugger is paused.
# Tip: call `jest.setTimeout()` with a large number (i.e. 10**6) to ensure the
# MongoClient isn't closed randomly leading to strange errors.
#
# Leave this blank to choose any random port (not recommended). Note: this
# option is also used when Node is started in debug mode, e.g. `node
# --inspect-brk` or `node --debug`, or if the debugger is attached before the
# database connection is memoized.
MONGODB_MS_PORT=6666
# Determines the maximum allowed character length of an *entire* HTTP
# Authorization header. The default is 500.
AUTH_HEADER_MAX_LENGTH=500
# Controls which versions of the API will respond to requests. Examples (disable
# v1; disable v1 and v2; disable v3, v5, and v7):
# DISABLED_API_VERSIONS=1
# DISABLED_API_VERSIONS=1,2
# DISABLED_API_VERSIONS=3,5,7
#
# Note that `DISABLED_API_VERSIONS=` (i.e. empty) means no
# versions are disabled!
DISABLED_API_VERSIONS=
# Determines the number of items returned by paginated endpoints.
RESULTS_PER_PAGE=100
# If !false, all rate limits and exponential soft banning will be ignored.
IGNORE_RATE_LIMITS=false
# If !false, no one will be able to use the API.
LOCKOUT_ALL_CLIENTS=false
# Controls what request methods are allowed. Empty means all are allowed
# (default).
#
# Example, to make API read-only:
# DISALLOWED_METHODS=POST,PUT
DISALLOWED_METHODS=
# Every Nth request will be be cancelled and an HTTP 555 response returned. Note
# that, in addition to every Nth request, the very first request sent to the API
# will also return a contrived error. Set to 0 to disable all contrived errors.
REQUESTS_PER_CONTRIVED_ERROR=10
# Maximum allowed size of a request body (and content-length header value) in
# bytes. Should be a string like 1kb, 1mb, 500b.
MAX_CONTENT_LENGTH_BYTES=10kb
# Maximum number of parameters that can be passed to endpoints that accept
# multiple slash parameters.
MAX_PARAMS_PER_REQUEST=100
# Minimum allowed string length of a username.
MIN_USER_NAME_LENGTH=4
# Maximum allowed string length of a username.
MAX_USER_NAME_LENGTH=16
# Minimum allowed string length of a user email.
MIN_USER_EMAIL_LENGTH=4
# Maximum allowed string length of a user email.
MAX_USER_EMAIL_LENGTH=75
# Expected string length of a user's cryptographic salt (hexadecimal length).
USER_SALT_LENGTH=32
# Expected string length of a user's cryptographic key (hexadecimal length).
USER_KEY_LENGTH=128
# Maximum allowed string length of a user's full name.
MAX_USER_FULLNAME_LENGTH=30
# Maximum allowed byte length of about section.
MAX_USER_ABOUT_SECTION_LENGTH_BYTES=1kb
# Maximum number of skills a skills section can have.
MAX_USER_SKILLS_SECTION_ITEMS=10
# Maximum allowed string length of a skill.
MAX_USER_SKILLS_SECTION_ITEM_LENGTH=30
# Maximum number of items a section can have.
MAX_USER_SECTION_ITEMS=10
# Maximum allowed string length of section titles.
MAX_SECTION_TITLE_LENGTH=100
# Maximum allowed string length of section locations.
MAX_SECTION_LOCATION_LENGTH=100
# Maximum allowed string length of section descriptions.
MAX_SECTION_DESCRIPTION_LENGTH=250
# Maximum allowed string length of section titles.
MAX_OPPORTUNITY_TITLE_LENGTH=100
# Maximum allowed byte length of opportunity contents.
MAX_OPPORTUNITY_CONTENTS_LENGTH_BYTES=3kb
# Maximum allowed string length of article titles.
MAX_ARTICLE_TITLE_LENGTH=100
# Maximum allowed byte length of article contents.
MAX_ARTICLE_CONTENTS_LENGTH_BYTES=3kb
# Maximum number of keywords an article can have.
MAX_ARTICLE_KEYWORDS=10
# Maximum allowed string length of article keywords.
MAX_ARTICLE_KEYWORD_LENGTH=20
# How long active sessions are kept around before being deleted. Renewing an
# active session will reset the session's time-to-live.
SESSION_EXPIRE_AFTER_SECONDS=30
### EXTERNAL SCRIPT VARIABLES ###
# (optional unless using the relevant external script)
# How often this script is going to be invoked. This doesn't determine anything
# automatically on its own, this is useful to ensure the script works no matter
# how often you decide to call it.
BAN_HAMMER_WILL_BE_CALLED_EVERY_SECONDS=60
# The maximum number of requests per BAN_HAMMER_RESOLUTION_WINDOW_SECONDS
# allowed by a single client.
BAN_HAMMER_MAX_REQUESTS_PER_WINDOW=10
# How far back into the past this script looks when checking a key or ip against
# BAN_HAMMER_MAX_REQUESTS_PER_WINDOW.
BAN_HAMMER_RESOLUTION_WINDOW_SECONDS=1
# The initial amount of time an offender is banned.
BAN_HAMMER_DEFAULT_BAN_TIME_MINUTES=1
# When an offender is banned twice in the same "period," they're banned for
# BAN_HAMMER_DEFAULT_BAN_TIME_MINUTES * BAN_HAMMER_RECIDIVISM_PUNISH_MULTIPLIER
# minutes instead of the default. This is also the length of the "period".
BAN_HAMMER_RECIDIVISM_PUNISH_MULTIPLIER=2
# The size (in bytes) of the root request-log collection will not be allowed to
# exceed this amount. Oldest entries are deleted first. Should be a string like
# 1kb, 1mb, 500b.
PRUNE_DATA_MAX_LOGS_BYTES=100mb
# The size (in bytes) of the root limited-log collection will not be allowed to
# exceed this amount. Oldest entries are deleted first. Should be a string like
# 1kb, 1mb, 500b.
PRUNE_DATA_MAX_BANNED_BYTES=10mb
# The size (in bytes) of the articles collection will not be allowed to exceed
# this amount. Oldest entries are deleted first. Should be a string like 1kb,
# 1mb, 500b.
PRUNE_DATA_MAX_ARTICLES_BYTES=100mb
# The size (in bytes) of the opportunities collection will not be allowed to
# exceed this amount. Oldest entries are deleted first. Should be a string like
# 1kb, 1mb, 500b.
PRUNE_DATA_MAX_OPPORTUNITIES_BYTES=100mb
# The size (in bytes) of the sessions collection will not be allowed to exceed
# this amount. Oldest entries are deleted first. Should be a string like 1kb,
# 1mb, 500b.
PRUNE_DATA_MAX_SESSIONS_BYTES=20mb
# The size (in bytes) of the users collection will not be allowed to exceed this
# amount. Oldest entries are deleted first. Should be a string like 1kb, 1mb,
# 500b.
PRUNE_DATA_MAX_USERS_BYTES=100mb
### TOOLS FRONTEND VARIABLES ###
# (optional unless using tools)