.env.example•2.74 kB
# Server Configuration
NODE_ENV=production
PORT=3000
HOST=0.0.0.0
LOG_LEVEL=info
# Database Configuration
DATABASE_URL=postgresql://mcp_user:secure_password@localhost:5432/mcp_db
REDIS_URL=redis://localhost:6379
REDIS_CLUSTER_NODES=redis-node-1:6379,redis-node-2:6379,redis-node-3:6379
# Security Configuration
JWT_SECRET=your-256-bit-secret-key-here
JWT_REFRESH_SECRET=your-refresh-256-bit-secret-key-here
JWT_EXPIRY=15m
JWT_REFRESH_EXPIRY=7d
ENCRYPTION_KEY=your-32-byte-encryption-key-here
MFA_SECRET=your-mfa-secret-key-here
# HashiCorp Vault Configuration
VAULT_ENDPOINT=http://vault:8200
VAULT_TOKEN=your-vault-token
VAULT_NAMESPACE=mcp
VAULT_MOUNT_POINT=secret
VAULT_ROLE_ID=your-role-id
VAULT_SECRET_ID=your-secret-id
# Authentication Providers
SAML_ENTRYPOINT=https://idp.example.com/sso/saml
SAML_ISSUER=secure-mcp-server
SAML_CERT_PATH=/certs/saml.crt
OIDC_CLIENT_ID=your-oidc-client-id
OIDC_CLIENT_SECRET=your-oidc-client-secret
OIDC_DISCOVERY_URL=https://accounts.google.com/.well-known/openid-configuration
# Container Runtime Configuration
CONTAINER_RUNTIME=gvisor
CONTAINER_REGISTRY=registry.example.com
CONTAINER_REGISTRY_USERNAME=registry-user
CONTAINER_REGISTRY_PASSWORD=registry-password
CONTAINER_NETWORK=mcp-isolated
CONTAINER_CPU_LIMIT=1000m
CONTAINER_MEMORY_LIMIT=1Gi
CONTAINER_TIMEOUT=300000
# Monitoring Configuration
PROMETHEUS_ENDPOINT=http://prometheus:9090
GRAFANA_ENDPOINT=http://grafana:3000
ELASTIC_ENDPOINT=http://elasticsearch:9200
ELASTIC_USERNAME=elastic
ELASTIC_PASSWORD=elastic-password
JAEGER_ENDPOINT=http://jaeger:14268
SENTRY_DSN=https://your-sentry-dsn@sentry.io/project-id
# Rate Limiting Configuration
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=100
RATE_LIMIT_SKIP_SUCCESSFUL_REQUESTS=false
RATE_LIMIT_SKIP_FAILED_REQUESTS=false
# CORS Configuration
CORS_ORIGINS=https://app.example.com,https://admin.example.com
CORS_CREDENTIALS=true
CORS_MAX_AGE=86400
# Feature Flags
ENABLE_MFA=true
ENABLE_SSO=true
ENABLE_AUDIT_LOG=true
ENABLE_DLP_SCANNING=true
ENABLE_CONTAINER_SCANNING=true
ENABLE_VULNERABILITY_SCANNING=true
ENABLE_CHAOS_ENGINEERING=false
# Service Discovery
CONSUL_HOST=consul
CONSUL_PORT=8500
ETCD_ENDPOINTS=http://etcd:2379
# Message Queue Configuration
RABBITMQ_URL=amqp://guest:guest@rabbitmq:5672
KAFKA_BROKERS=kafka-1:9092,kafka-2:9092,kafka-3:9092
# S3 Configuration for Backups
S3_BUCKET=mcp-backups
S3_REGION=us-east-1
S3_ACCESS_KEY_ID=your-s3-access-key
S3_SECRET_ACCESS_KEY=your-s3-secret-key
# Compliance Configuration
COMPLIANCE_MODE=SOC2
AUDIT_RETENTION_DAYS=2555
DATA_RESIDENCY_REGION=US
PII_ENCRYPTION_ENABLED=true
# Performance Configuration
WORKER_THREADS=4
CLUSTER_WORKERS=auto
CONNECTION_POOL_SIZE=20
QUERY_TIMEOUT_MS=30000
CACHE_TTL_SECONDS=3600