IoCManager/.env.example at main · JMousqueton/IoCManager · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
# Flask Configuration
SECRET_KEY=change-this-to-a-random-secret-key-in-production
FLASK_ENV=development
FLASK_DEBUG=True
FLASK_HOST=127.0.0.1
FLASK_PORT=5000

# Database Configuration
# DATABASE_URL is auto-configured in app/config.py with absolute path
# DATABASE_URL=sqlite:///instance/ioc_manager.db
SQLALCHEMY_TRACK_MODIFICATIONS=False

# VirusTotal API Configuration
VIRUSTOTAL_API_KEY=your-virustotal-api-key-here
VIRUSTOTAL_API_URL=https://www.virustotal.com/vtapi/v2
VIRUSTOTAL_RATE_LIMIT=4
VIRUSTOTAL_CACHE_DAYS=7
VIRUSTOTAL_NO_SSL_CHECK=True

# URLScan.io API Configuration
URLSCAN_API_KEY=your-urlscan-api-key-here
URLSCAN_RATE_LIMIT=1
URLSCAN_CACHE_DAYS=7
URLSCAN_NO_SSL_CHECK=True

# Domain Enrichment Configuration
DOMAIN_ENRICHMENT_CACHE_DAYS=30
DOMAIN_ENRICHMENT_NO_SSL_CHECK=True

# AS Lookup Configuration
# ASN_DATABASE_PATH is auto-configured in app/config.py with absolute path
# ASN_DATABASE_PATH=data/ipasn.dat
ASN_CACHE_DAYS=30

# MaxMind GeoLite2 Credentials (required for downloading GeoIP databases)
# Sign up at: https://www.maxmind.com/en/geolite2/signup
MAXMIND_ACCOUNT_ID=your-maxmind-account-id-here
MAXMIND_LICENSE_KEY=your-maxmind-license-key-here

# Email Configuration (SMTP)
MAIL_SERVER=smtp.example.com
MAIL_PORT=587
MAIL_USE_TLS=True
MAIL_USE_SSL=False
MAIL_USERNAME=ioc-manager@example.com
MAIL_PASSWORD=your-email-password-here
MAIL_DEFAULT_SENDER=ioc-manager@example.com

# Email Reports Configuration
DAILY_REPORT_RECIPIENTS=cert-team@example.com
WEEKLY_REPORT_RECIPIENTS=cert-team@example.com,management@example.com
REPORT_ENABLED=False

# IOC Lifecycle Management
# Number of days before draft IOCs are automatically archived
DRAFT_RETENTION_DAYS=30
# Number of days before processed notifications are purged from the queue
NOTIFICATION_RETENTION_DAYS=7

# Session Configuration
SESSION_COOKIE_SECURE=False
SESSION_COOKIE_HTTPONLY=True
SESSION_COOKIE_SAMESITE=Lax
PERMANENT_SESSION_LIFETIME=28800

# Authentication Configuration
# Set to True to allow users to self-register, False to require admin to create accounts
REGISTRATION_ENABLED=False

# Application Settings
ITEMS_PER_PAGE=50
MAX_CONTENT_LENGTH=16777216

# IOC Expiration Configuration
IOC_DEFAULT_TTL_DAYS=90
IOC_AUTO_EXPIRE_ENABLED=True

# MFA Settings
MFA_ENABLED=True
MFA_ISSUER_NAME=IOC Manager
MFA_RATE_LIMIT_ATTEMPTS=10
MFA_RATE_LIMIT_WINDOW=15