# ==========================================
# NexusGuard SD-WAN - Global Configuration
# ==========================================

# 1. Database Configuration (PostgreSQL)
DB_HOST=postgres
DB_PORT=5432
DB_USER=nexusguard
DB_PASSWORD=GantiDenganPasswordDatabaseYangKuat123!
DB_NAME=nexusguard

# 2. Redis Configuration
REDIS_ADDR=redis:6379

# 3. Security & Cryptography
# Generate menggunakan: openssl rand -hex 32
JWT_SECRET=GantiDenganKunciRahasiaJWTUntukDashboard256Bit
SERVER_SALT=GantiDenganKunciGaramUntukWireGuard256Bit

# 4. Networking & SD-WAN
NFTABLES_TABLE=nexusguard
IPAM_POOL=10.8.0.0/16
API_PORT=8080
WEB_PORT=80

# 5. Dashboard UI (Frontend Build Configuration)
# URL API yang akan diakses oleh web browser client
VITE_API_BASE_URL=http://localhost:8080/api/v1

# 6. General Settings
GIN_MODE=release
LOG_LEVEL=info

# 7. CORS Configuration
# Comma-separated list of allowed origins for the API.
# Use '*' to allow all origins (NOT recommended for production).
# Example: https://dash.yourdomain.com,https://admin.yourdomain.com
CORS_ALLOWED_ORIGINS=http://localhost:5173

# 8. Share Link Configuration
# TTL for peer config share links (Go duration format)
SHARE_LINK_TTL=24h