Full self-hosted port of the Elydora tamper-evident audit protocol: - Hono API server with PostgreSQL, Redis, MinIO adapters - Ed25519 signed operations, chain hashing, Merkle epoch rollups - PBKDF2 password hashing, HMAC-SHA256 JWT, 5-role RBAC - Next.js management console - Node.js, Python, and Go SDKs - Docker Compose for local deployment - Helm chart for Kubernetes - Comprehensive security hardening and audit fixes applied Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
32 lines
790 B
Bash
32 lines
790 B
Bash
# PostgreSQL
|
|
POSTGRES_USER=elydora
|
|
POSTGRES_PASSWORD=elydora-secret-change-me
|
|
POSTGRES_DB=elydora
|
|
DATABASE_URL=postgresql://elydora:elydora-secret-change-me@postgres:5432/elydora
|
|
|
|
# Redis
|
|
REDIS_URL=redis://redis:6379
|
|
|
|
# MinIO
|
|
MINIO_ROOT_USER=elydora
|
|
MINIO_ROOT_PASSWORD=elydora-minio-secret-change-me
|
|
MINIO_ENDPOINT=http://minio:9000
|
|
MINIO_ACCESS_KEY=elydora
|
|
MINIO_SECRET_KEY=elydora-minio-secret-change-me
|
|
MINIO_BUCKET=elydora-evidence
|
|
|
|
# Elydora API
|
|
PORT=8787
|
|
ENVIRONMENT=production
|
|
API_VERSION=v1
|
|
PROTOCOL_VERSION=1.0
|
|
JWT_SECRET=change-me-to-a-random-string-at-least-32-chars
|
|
ELYDORA_SIGNING_KEY=change-me-base64url-ed25519-private-key
|
|
ALLOWED_ORIGINS=http://localhost:3000
|
|
|
|
# TSA (optional)
|
|
TSA_URL=http://timestamp.sectigo.com
|
|
|
|
# Console
|
|
NEXT_PUBLIC_API_BASE_URL=http://localhost:8787
|