Samir Boulahtit
c2c0e3c740
Some checks failed
The setting `settings.platform_domain` (the global/main domain like "wizard.lu") was easily confused with `platform.domain` (per-platform domain like "rewardflow.lu"). Renamed to `settings.main_domain` / `MAIN_DOMAIN` env var across the entire codebase. Also updated docs to reflect the refactored store detection logic with `is_platform_domain` / `is_subdomain_of_platform` guards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
246 lines
8.9 KiB
Plaintext
246 lines
8.9 KiB
Plaintext
# =============================================================================
|
|
# ENVIRONMENT CONFIGURATION
|
|
# =============================================================================
|
|
DEBUG=False
|
|
|
|
# =============================================================================
|
|
# PROJECT INFORMATION
|
|
# =============================================================================
|
|
PROJECT_NAME=Orion - Multi-Store Marketplace Platform
|
|
DESCRIPTION=Multi-tenants multi-themes ecommerce application
|
|
VERSION=2.2.0
|
|
|
|
# =============================================================================
|
|
# DATABASE CONFIGURATION (PostgreSQL required)
|
|
# =============================================================================
|
|
# Default works with: docker-compose up -d db
|
|
DATABASE_URL=postgresql://orion_user:secure_password@localhost:5432/orion_db
|
|
|
|
# For production, use your PostgreSQL connection string:
|
|
# DATABASE_URL=postgresql://username:password@production-host:5432/orion_db
|
|
|
|
# =============================================================================
|
|
# ADMIN INITIALIZATION
|
|
# =============================================================================
|
|
# These are used by init_production.py to create the platform admin
|
|
# ⚠️ CHANGE THESE IN PRODUCTION!
|
|
ADMIN_EMAIL=admin@wizard.lu
|
|
ADMIN_USERNAME=admin
|
|
ADMIN_PASSWORD=change-me-in-production
|
|
ADMIN_FIRST_NAME=Platform
|
|
ADMIN_LAST_NAME=Administrator
|
|
|
|
# =============================================================================
|
|
# JWT CONFIGURATION
|
|
# =============================================================================
|
|
JWT_SECRET_KEY=your-super-secret-jwt-key-change-in-production
|
|
JWT_EXPIRE_HOURS=24
|
|
JWT_EXPIRE_MINUTES=30
|
|
|
|
# =============================================================================
|
|
# API SERVER
|
|
# =============================================================================
|
|
API_HOST=0.0.0.0
|
|
API_PORT=8000
|
|
|
|
# =============================================================================
|
|
# DOCUMENTATION
|
|
# =============================================================================
|
|
# Development
|
|
DOCUMENTATION_URL=http://localhost:8001
|
|
# Staging
|
|
# DOCUMENTATION_URL=https://staging-docs.wizard.lu
|
|
# Production
|
|
# DOCUMENTATION_URL=https://docs.wizard.lu
|
|
|
|
# =============================================================================
|
|
# RATE LIMITING
|
|
# =============================================================================
|
|
RATE_LIMIT_ENABLED=True
|
|
RATE_LIMIT_REQUESTS=100
|
|
RATE_LIMIT_WINDOW=3600
|
|
|
|
# =============================================================================
|
|
# LOGGING
|
|
# =============================================================================
|
|
LOG_LEVEL=INFO
|
|
LOG_FILE=logs/app.log
|
|
|
|
# =============================================================================
|
|
# MAIN DOMAIN CONFIGURATION
|
|
# =============================================================================
|
|
# Your main platform domain
|
|
MAIN_DOMAIN=wizard.lu
|
|
|
|
# Custom domain features
|
|
# Enable/disable custom domains
|
|
ALLOW_CUSTOM_DOMAINS=True
|
|
# Require DNS verification
|
|
REQUIRE_DOMAIN_VERIFICATION=True
|
|
|
|
# SSL/TLS configuration
|
|
# "letsencrypt" or "cloudflare", "manual"
|
|
SSL_PROVIDER=letsencrypt
|
|
# Set to True if using automated SSL
|
|
AUTO_PROVISION_SSL=False
|
|
|
|
# DNS verification
|
|
DNS_VERIFICATION_PREFIX=_wizard-verify
|
|
DNS_VERIFICATION_TTL=3600
|
|
|
|
# =============================================================================
|
|
# STRIPE BILLING
|
|
# =============================================================================
|
|
# Get your keys from https://dashboard.stripe.com/apikeys
|
|
# See docs/features/subscription-billing.md for setup guide
|
|
STRIPE_SECRET_KEY=sk_test_your_secret_key_here
|
|
STRIPE_PUBLISHABLE_KEY=pk_test_your_publishable_key_here
|
|
STRIPE_WEBHOOK_SECRET=whsec_your_webhook_secret_here
|
|
STRIPE_TRIAL_DAYS=30
|
|
|
|
# =============================================================================
|
|
# EMAIL CONFIGURATION
|
|
# =============================================================================
|
|
# Provider: smtp, sendgrid, mailgun, ses
|
|
EMAIL_PROVIDER=smtp
|
|
EMAIL_FROM_ADDRESS=noreply@wizard.lu
|
|
EMAIL_FROM_NAME=Wizard
|
|
EMAIL_REPLY_TO=
|
|
|
|
# SMTP Settings (used when EMAIL_PROVIDER=smtp)
|
|
SMTP_HOST=smtp.example.com
|
|
SMTP_PORT=587
|
|
SMTP_USER=
|
|
SMTP_PASSWORD=
|
|
SMTP_USE_TLS=true
|
|
SMTP_USE_SSL=false
|
|
|
|
# SendGrid (used when EMAIL_PROVIDER=sendgrid)
|
|
# SENDGRID_API_KEY=SG.your_api_key_here
|
|
|
|
# Mailgun (used when EMAIL_PROVIDER=mailgun)
|
|
# MAILGUN_API_KEY=your_api_key_here
|
|
# MAILGUN_DOMAIN=mg.yourdomain.com
|
|
|
|
# Amazon SES (used when EMAIL_PROVIDER=ses)
|
|
# AWS_ACCESS_KEY_ID=your_access_key
|
|
# AWS_SECRET_ACCESS_KEY=your_secret_key
|
|
# AWS_REGION=eu-west-1
|
|
|
|
# Email behavior
|
|
EMAIL_ENABLED=true
|
|
EMAIL_DEBUG=false
|
|
|
|
# =============================================================================
|
|
# PLATFORM LIMITS
|
|
# =============================================================================
|
|
MAX_STORES_PER_USER=5
|
|
MAX_TEAM_MEMBERS_PER_STORE=50
|
|
INVITATION_EXPIRY_DAYS=7
|
|
|
|
# =============================================================================
|
|
# DEMO/SEED DATA CONFIGURATION (Development only)
|
|
# =============================================================================
|
|
SEED_DEMO_STORES=3
|
|
SEED_CUSTOMERS_PER_STORE=15
|
|
SEED_PRODUCTS_PER_STORE=20
|
|
SEED_ORDERS_PER_STORE=10
|
|
|
|
# =============================================================================
|
|
# CELERY / REDIS TASK QUEUE
|
|
# =============================================================================
|
|
# Redis password (must match docker-compose.yml --requirepass flag)
|
|
# ⚠️ CHANGE THIS IN PRODUCTION! Generate with: openssl rand -hex 16
|
|
REDIS_PASSWORD=changeme
|
|
|
|
# Redis connection URL (used for Celery broker and backend)
|
|
# Default works with: docker-compose up -d redis
|
|
REDIS_URL=redis://localhost:6379/0
|
|
|
|
# Enable Celery for background tasks (set to false to use FastAPI BackgroundTasks)
|
|
# Recommended: false for development, true for production
|
|
USE_CELERY=false
|
|
|
|
# Flower monitoring dashboard URL (for admin panel links)
|
|
FLOWER_URL=http://localhost:5555
|
|
|
|
# Flower basic authentication password
|
|
# ⚠️ CHANGE THIS IN PRODUCTION!
|
|
FLOWER_PASSWORD=changeme
|
|
|
|
# =============================================================================
|
|
# SENTRY ERROR TRACKING
|
|
# =============================================================================
|
|
# Get your DSN from https://sentry.io (free tier available)
|
|
# Leave empty to disable Sentry
|
|
SENTRY_DSN=
|
|
SENTRY_ENVIRONMENT=production
|
|
SENTRY_TRACES_SAMPLE_RATE=0.1
|
|
|
|
# =============================================================================
|
|
# MONITORING
|
|
# =============================================================================
|
|
ENABLE_METRICS=true
|
|
GRAFANA_URL=https://grafana.wizard.lu
|
|
GRAFANA_ADMIN_USER=admin
|
|
GRAFANA_ADMIN_PASSWORD=changeme
|
|
|
|
# =============================================================================
|
|
# CLOUDFLARE R2 STORAGE
|
|
# =============================================================================
|
|
# Storage backend: "local" (default) or "r2" for Cloudflare R2
|
|
# Set to "r2" for production to enable cloud storage
|
|
STORAGE_BACKEND=local
|
|
|
|
# Cloudflare R2 credentials (required when STORAGE_BACKEND=r2)
|
|
# Get these from Cloudflare Dashboard > R2 > Manage R2 API Tokens
|
|
R2_ACCOUNT_ID=
|
|
R2_ACCESS_KEY_ID=
|
|
R2_SECRET_ACCESS_KEY=
|
|
R2_BUCKET_NAME=orion-media
|
|
|
|
# Public URL for R2 bucket (optional - for custom domain)
|
|
# If not set, uses Cloudflare's default R2 public URL
|
|
# Example: https://media.yoursite.com
|
|
R2_PUBLIC_URL=
|
|
|
|
# Cloudflare R2 backup bucket (used by scripts/backup.sh --upload)
|
|
R2_BACKUP_BUCKET=orion-backups
|
|
|
|
# =============================================================================
|
|
# LOYALTY MODULE
|
|
# =============================================================================
|
|
# Anti-fraud defaults (all optional, shown values are defaults)
|
|
# LOYALTY_DEFAULT_COOLDOWN_MINUTES=15
|
|
# LOYALTY_MAX_DAILY_STAMPS=5
|
|
# LOYALTY_PIN_MAX_FAILED_ATTEMPTS=5
|
|
# LOYALTY_PIN_LOCKOUT_MINUTES=30
|
|
|
|
# Points configuration
|
|
# LOYALTY_DEFAULT_POINTS_PER_EURO=10
|
|
|
|
# Google Wallet integration
|
|
# See docs/deployment/hetzner-server-setup.md Step 25 for setup guide
|
|
# Get Issuer ID from https://pay.google.com/business/console
|
|
# LOYALTY_GOOGLE_ISSUER_ID=3388000000012345678
|
|
# LOYALTY_GOOGLE_SERVICE_ACCOUNT_JSON=/path/to/service-account.json
|
|
# LOYALTY_GOOGLE_WALLET_ORIGINS=["https://yourdomain.com"]
|
|
# LOYALTY_DEFAULT_LOGO_URL=https://yourdomain.com/path/to/default-logo.png
|
|
|
|
# Apple Wallet integration (requires Apple Developer account)
|
|
# LOYALTY_APPLE_PASS_TYPE_ID=pass.com.example.loyalty
|
|
# LOYALTY_APPLE_TEAM_ID=ABCD1234
|
|
# LOYALTY_APPLE_WWDR_CERT_PATH=/path/to/wwdr.pem
|
|
# LOYALTY_APPLE_SIGNER_CERT_PATH=/path/to/signer.pem
|
|
# LOYALTY_APPLE_SIGNER_KEY_PATH=/path/to/signer.key
|
|
|
|
# QR code size in pixels (default: 300)
|
|
# LOYALTY_QR_CODE_SIZE=300
|
|
|
|
# =============================================================================
|
|
# CLOUDFLARE CDN / PROXY
|
|
# =============================================================================
|
|
# Set to true when your domain is proxied through CloudFlare
|
|
# This enables proper handling of CF-Connecting-IP and other CloudFlare headers
|
|
CLOUDFLARE_ENABLED=false
|