Custom_Authentication_Service_NodeJS/.env.example at main · YatharthKumarSaxena/Custom_Authentication_Service_NodeJS · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
# ------------------ Server --------------------
PORT_NUMBER=8080

# ------------------ MongoDB -------------------
DB_NAME=custom_auth_service_db
DB_URL=your_mongodb_url_string_here
CONNECTION_STRING=your_mongodb_connection_string_here

# ------------------ JWT -----------------------
ACCESS_TOKEN_SECRET_CODE=your_access_token_secret_here
REFRESH_TOKEN_SECRET_CODE=your_refresh_token_secret_here
VERIFICATION_LINK_SECRET=your_verification_link_secret_here

ACCESS_TOKEN_EXPIRY=6000
REFRESH_TOKEN_EXPIRY=604800
RESET_TOKEN_EXPIRY=3600
VERIFICATION_TOKEN_EXPIRY=900

# ------------------ Bcrypt --------------------
SALT=12

# ------------------ Admin User ----------------
ADMIN_NAME=Admin
ADMIN_COUNTRY_CODE=91
ADMIN_LOCAL_NUMBER=XXXXXXXXXX
ADMIN_EMAIL_ID=admin@example.com
ADMIN_PASSWORD=strong_admin_password

# ------------------ Infrastructure ------------
IP_ADDRESS_CODE=1
USER_REGISTRATION_CAPACITY=100000

# ------------------ Cookie Config -------------
COOKIE_HTTP_ONLY=false
COOKIE_SECURE=false
COOKIE_SAME_SITE=Strict
COOKIE_DOMAIN=localhost

# ------------------ Device Info ----------------
DEVICE_UUID=your-device-uuid-here
DEVICE_TYPE=LAPTOP
DEVICE_NAME=Your-Device-Name

# ------------------ Auth Logs Cleanup Config ---
AUTH_LOG_CLEANUP_CRON=0 5 * * 0
AUTH_LOG_CLEANUP_TIMEZONE=Asia/Kolkata
AUTH_LOG_RETENTION_DAYS=90

# ------------------ User Cleanup Config --------
USER_CLEANUP_CRON=0 3 * * 0
USER_CLEANUP_TIMEZONE=Asia/Kolkata
USER_RETENTION_DAYS=60

# ------------------ Environment ---------------
NODE_ENV=development

# ------------------ Redis Configuration ------------------
REDIS_HOST=127.0.0.1
REDIS_PORT=6379
REDIS_PASSWORD=
REDIS_DB=0
REDIS_MAX_RETRY_ATTEMPTS=10
REDIS_RETRY_INITIAL_DELAY=100
REDIS_RETRY_MAX_DELAY=2000

# ------------------ Global Rate Limiter ------------------
RATE_LIMIT_WINDOW=10
RATE_LIMIT_MAX=100

# ------------------ Authentication ------------------
AUTH_MODE=EMAIL               # EMAIL | PHONE | BOTH | EITHER
VERIFICATION_MODE=OTP         # OTP | LINK

AUTO_LOGIN_AFTER_VERIFICATION=true
IS_2FA_FEATURE_ENABLED=true

AUTO_EMAIL_VERIFICATION=true
AUTO_PHONE_VERIFICATION=false

FIRST_NAME_SETTING=Mandatory  # Optional | Mandatory | Disabled

WHITELISTED_DEVICE_UUIDS=your-device-uuid-here,another-device-uuid-here
ENABLE_DEVICE_SOFT_REPLACE=true
ENABLE_AUTH_SESSION_LOGGING=true

# ------------------ Email Configuration (SMTP) ------------------
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_SECURE=false
SMTP_USER=your-email@gmail.com
SMTP_PASS=your_16_digit_gmail_app_password

# Email Sender Configuration
EMAIL_FROM=your-email@gmail.com
EMAIL_FROM_NAME=Authentication Service

# ------------------ Application URLs ------------------
ADMIN_PANEL_LINK=http://localhost:8080/admin
FRONTEND_URL=http://localhost:3030

# ------------------ Branding ------------------
COMPANY_NAME="Admin Panel Service"
COMPANY_LOGO="https://ui-avatars.com/api/?name=Admin+Panel+Service&size=150&background=4f46e5&color=fff&bold=true&fontSize=0.4"
SUPPORT_EMAIL=support@yourcompany.com
COMPANY_ADDRESS="Your City, Your State, Your Country"
RESET_PASSWORD_WINDOW_MINUTES=10

# ------------------ SMS Configuration ------------------
SMS_MODE=mock                 # mock | termux-ssh | real
SMS_ENABLED=true

# Termux SSH Configuration
TERMUX_IP=192.168.1.100
TERMUX_PORT=8022
TERMUX_USER=u0_a123

# ------------------ Testing Configuration ------------------
TEST_EMAIL=test@example.com
TEST_PHONE=+91XXXXXXXXXX

# ------------------ Audit Snapshot Configuration ------------------
AUDIT_MODE=CHANGED_ONLY       # FULL | CHANGED_ONLY

# ------------------ Microservice Configuration ------------------
MAKE_IT_MICROSERVICE=true

DELETION_POLICY=HARD_DELETE # SOFT_DELETE | HARD_DELETE | HYBRID

# Service Token Secrets (use strong random values in production)
CUSTOM_AUTH_SERVICE_TOKEN_SECRET=2f9c8b4d3e6a1c7f5b2d9e0a6f3c4b8d7a1e2f9c5d8b3a6e1c7f4d9b2a6e8c1
SOFTWARE_MANAGEMENT_SERVICE_TOKEN_SECRET=5d1f9a8c7b3e6d2a4f1c8b7e9a6d3c5f2b8e1a7c4d6f9b3a5e2c7d1f8a4b6e9
ADMIN_PANEL_SERVICE_TOKEN_SECRET=8a3c6e1d9b4f7a2c5e8d1f6b3a9c7e2d4b6f1a8c5d9e3b7f2a6c4d1e8b5f9a3

# Service Names (must match across all services)
CUSTOM_AUTH_SERVICE_NAME=Custom_Auth_Service
SOFTWARE_MANAGEMENT_SERVICE_NAME=Software_Management_Service
ADMIN_PANEL_SERVICE_NAME=Admin_Panel_Service

# Service Instance Name
SERVICE_INSTANCE_NAME=auth-service-01

# Allowed Services (comma-separated list of allowed service names)
ALLOWED_SERVICE_NAMES=${CUSTOM_AUTH_SERVICE_NAME},${SOFTWARE_MANAGEMENT_SERVICE_NAME},${ADMIN_PANEL_SERVICE_NAME}

# Redis Key Salt (for hashed session keys)
REDIS_KEY_SALT=7e3f91c4a6b8d2f5c0e9a1b7d4c6f8e2a5b3c1d9f6e4a7b2c8d0e1f3a5b6c7d

# Internal Service URLs (only used when MAKE_IT_MICROSERVICE=true)
ADMIN_PANEL_SERVICE_URL=http://localhost:8081
SOFTWARE_MANAGEMENT_SERVICE_URL=http://localhost:8082