Ansible-SnipeIT/roles/snipeit/templates/env.j2

# --------------------------------------------
# REQUIRED: BASIC APP SETTINGS
# --------------------------------------------
APP_ENV={{ snipeit_config_app_env }}
APP_DEBUG={{ snipeit_config_debug }}
APP_KEY={{ snipeit_config_app_key }}
APP_URL={{ snipeit_config_app_url }}
APP_TIMEZONE='{{ snipeit_config_app_timezone }}'
APP_LOCALE='{{ snipeit_config_app_locale }}'
MAX_RESULTS={{ snipeit_config_app_max_results }}


# --------------------------------------------
# REQUIRED: UPLOADED FILE STORAGE SETTINGS
# --------------------------------------------
PRIVATE_FILESYSTEM_DISK={{ snipeit_config_private_filesystem_disk }}
PUBLIC_FILESYSTEM_DISK={{ snipeit_config_public_filesystem_disk }}

# --------------------------------------------
# REQUIRED: DATABASE SETTINGS
# --------------------------------------------
DB_CONNECTION={{ snipeit_config_db_connection }}
DB_HOST={{ snipeit_config_db_host }}
DB_PORT={{ snipeit_config_db_port }}
DB_DATABASE="{{ snipeit_config_db_database }}"
DB_USERNAME="{{ snipeit_config_db_username }}"
DB_PASSWORD="{{ snipeit_config_db_password }}"
DB_PREFIX={{ snipeit_config_db_prefix }}
DB_DUMP_PATH='{{ snipeit_config_db_dump_path }}'
DB_CHARSET={{ snipeit_config_db_charset }}
DB_COLLATION={{ snipeit_config_db_collation }}

# --------------------------------------------
# OPTIONAL: SSL DATABASE SETTINGS
# --------------------------------------------
DB_SSL={{ snipeit_config_db_ssl }}
DB_SSL_IS_PAAS={{ snipeit_config_db_ssl_is_paas }}
DB_SSL_KEY_PATH={{ snipeit_config_db_ssl_key_path }}
DB_SSL_CERT_PATH={{ snipeit_config_db_ssl_cert_path }}
DB_SSL_CA_PATH={{ snipeit_config_db_ssl_ca_path }}
DB_SSL_CIPHER={{ snipeit_config_db_ssl_cipher }}
DB_SSL_VERIFY_SERVER={{ snipeit_config_db_ssl_verify_server }}

# --------------------------------------------
# REQUIRED: OUTGOING MAIL SERVER SETTINGS
# --------------------------------------------
MAIL_DRIVER={{ snipeit_config_mail_driver }}
MAIL_HOST={{ snipeit_config_mail_host }}
MAIL_PORT={{ snipeit_config_mail_port }}
MAIL_USERNAME={{ snipeit_config_mail_username }}
MAIL_PASSWORD={{ snipeit_config_mail_password }}
MAIL_ENCRYPTION={{ snipeit_config_mail_encryption }}
MAIL_FROM_ADDR={{ snipeit_config_mail_from_addr }}
MAIL_FROM_NAME='{{ snipeit_config_mail_from_name }}'
MAIL_REPLYTO_ADDR={{ snipeit_config_mail_replyto_addr }}
MAIL_REPLYTO_NAME='{{ snipeit_config_mail_replyto_name }}'
MAIL_AUTO_EMBED_METHOD='{{ snipeit_config_mail_auto_embed_method }}'

# --------------------------------------------
# REQUIRED: IMAGE LIBRARY
# This should be gd or imagick
# --------------------------------------------
IMAGE_LIB={{ snipeit_config_image_lib }}

# --------------------------------------------
# OPTIONAL: BACKUP SETTINGS
# --------------------------------------------
MAIL_BACKUP_NOTIFICATION_DRIVER=null
MAIL_BACKUP_NOTIFICATION_ADDRESS=null
BACKUP_ENV=true
ALLOW_BACKUP_DELETE=false
ALLOW_DATA_PURGE=false

# --------------------------------------------
# OPTIONAL: SESSION SETTINGS
# --------------------------------------------
SESSION_DRIVER=file
SESSION_LIFETIME=12000
EXPIRE_ON_CLOSE=false
ENCRYPT=false
COOKIE_NAME=snipeit_session
COOKIE_DOMAIN=null
SECURE_COOKIES=false
API_TOKEN_EXPIRATION_YEARS=15
BS_TABLE_STORAGE=cookieStorage
BS_TABLE_DEEPLINK=true

# --------------------------------------------
# OPTIONAL: SECURITY HEADER SETTINGS
# --------------------------------------------
APP_TRUSTED_PROXIES=192.168.1.1,10.0.0.1
ALLOW_IFRAMING=false
REFERRER_POLICY=same-origin
ENABLE_CSP=false
CORS_ALLOWED_ORIGINS=null
ENABLE_HSTS=false

# --------------------------------------------
# OPTIONAL: CACHE SETTINGS
# --------------------------------------------
CACHE_DRIVER=file
QUEUE_DRIVER=sync
CACHE_PREFIX=snipeit

# --------------------------------------------
# OPTIONAL: REDIS SETTINGS
# --------------------------------------------
REDIS_HOST=null
REDIS_PASSWORD=null
REDIS_PORT=null

# --------------------------------------------
# OPTIONAL: MEMCACHED SETTINGS
# --------------------------------------------
MEMCACHED_HOST=null
MEMCACHED_PORT=null

# --------------------------------------------
# OPTIONAL: PUBLIC S3 Settings
# --------------------------------------------
PUBLIC_AWS_SECRET_ACCESS_KEY=null
PUBLIC_AWS_ACCESS_KEY_ID=null
PUBLIC_AWS_DEFAULT_REGION=null
PUBLIC_AWS_BUCKET=null
PUBLIC_AWS_URL=null
PUBLIC_AWS_BUCKET_ROOT=null

# --------------------------------------------
# OPTIONAL: PRIVATE S3 Settings
# --------------------------------------------
PRIVATE_AWS_ACCESS_KEY_ID=null
PRIVATE_AWS_SECRET_ACCESS_KEY=null
PRIVATE_AWS_DEFAULT_REGION=null
PRIVATE_AWS_BUCKET=null
PRIVATE_AWS_URL=null
PRIVATE_AWS_BUCKET_ROOT=null

# --------------------------------------------
# OPTIONAL: AWS Settings
# --------------------------------------------
AWS_ACCESS_KEY_ID=null
AWS_SECRET_ACCESS_KEY=null
AWS_DEFAULT_REGION=null

# --------------------------------------------
# OPTIONAL: LOGIN THROTTLING
# --------------------------------------------
LOGIN_MAX_ATTEMPTS=5
LOGIN_LOCKOUT_DURATION=60
LOGIN_AUTOCOMPLETE=false

# --------------------------------------------
# OPTIONAL: FORGOTTEN PASSWORD SETTINGS
# --------------------------------------------
RESET_PASSWORD_LINK_EXPIRES=15
PASSWORD_CONFIRM_TIMEOUT=10800
PASSWORD_RESET_MAX_ATTEMPTS_PER_MIN=50

# --------------------------------------------
# OPTIONAL: MISC
# --------------------------------------------
LOG_CHANNEL=single
LOG_MAX_DAYS=10
APP_LOCKED=false
APP_CIPHER=AES-256-CBC
APP_FORCE_TLS=false
APP_ALLOW_INSECURE_HOSTS=false
GOOGLE_MAPS_API=
LDAP_MEM_LIM=500M
LDAP_TIME_LIM=600
IMPORT_TIME_LIMIT=600
IMPORT_MEMORY_LIMIT=500M
REPORT_TIME_LIMIT=12000
REQUIRE_SAML=false
API_THROTTLE_PER_MINUTE=120
CSV_ESCAPE_FORMULAS=true

# --------------------------------------------
# OPTIONAL: HASHING
# --------------------------------------------
HASHING_DRIVER='bcrypt'
BCRYPT_ROUNDS=10
ARGON_MEMORY=1024
ARGON_THREADS=2
ARGON_TIME=2

# --------------------------------------------
# OPTIONAL: SCIM
# --------------------------------------------
SCIM_TRACE=false