# Foxhunt Security Configuration
# Generated on Sun Aug 17 08:17:14 PM CEST 2025

# JWT Configuration
# SECURITY: JWT secret must come from environment variables or vault
FOXHUNT_JWT_SECRET=${FOXHUNT_JWT_SECRET}
FOXHUNT_JWT_EXPIRATION=3600
FOXHUNT_JWT_ISSUER=foxhunt-hft
FOXHUNT_JWT_AUDIENCE=foxhunt-services

# TLS Configuration
FOXHUNT_TLS_ENABLED=true
FOXHUNT_TLS_CERT_DIR=/home/jgrusewski/Work/foxhunt/certs
FOXHUNT_TLS_CA_CERT=/home/jgrusewski/Work/foxhunt/certs/ca/ca-cert.pem
FOXHUNT_TLS_AUTO_GENERATE=false
FOXHUNT_TLS_CERT_VALIDITY_DAYS=365

# RBAC Configuration
FOXHUNT_RBAC_ENABLED=true
FOXHUNT_RBAC_CACHE_TTL=300

# Secrets Configuration
FOXHUNT_SECRETS_BACKEND=filesystem
FOXHUNT_SECRETS_PATH=/home/jgrusewski/Work/foxhunt/certs/secrets
# SECURITY: Encryption key must come from environment variables or vault
FOXHUNT_SECRETS_ENCRYPTION_KEY=${FOXHUNT_SECRETS_ENCRYPTION_KEY}
FOXHUNT_SECRETS_CACHE_TTL=300

# Audit Configuration
FOXHUNT_AUDIT_ENABLED=true
FOXHUNT_AUDIT_LOG_TOKEN_VALIDATION=false
FOXHUNT_AUDIT_LOG_LEVEL=info

# Service-specific TLS paths
FOXHUNT_TLS_TRADING_ENGINE_CERT=/home/jgrusewski/Work/foxhunt/certs/services/trading-engine/trading-engine-cert.pem
FOXHUNT_TLS_TRADING_ENGINE_KEY=/home/jgrusewski/Work/foxhunt/certs/services/trading-engine/trading-engine-key.pem
FOXHUNT_TLS_MARKET_DATA_CERT=/home/jgrusewski/Work/foxhunt/certs/services/market-data/market-data-cert.pem
FOXHUNT_TLS_MARKET_DATA_KEY=/home/jgrusewski/Work/foxhunt/certs/services/market-data/market-data-key.pem
FOXHUNT_TLS_PERSISTENCE_CERT=/home/jgrusewski/Work/foxhunt/certs/services/persistence/persistence-cert.pem
FOXHUNT_TLS_PERSISTENCE_KEY=/home/jgrusewski/Work/foxhunt/certs/services/persistence/persistence-key.pem
FOXHUNT_TLS_BROKER_CONNECTOR_CERT=/home/jgrusewski/Work/foxhunt/certs/services/broker-connector/broker-connector-cert.pem
FOXHUNT_TLS_BROKER_CONNECTOR_KEY=/home/jgrusewski/Work/foxhunt/certs/services/broker-connector/broker-connector-key.pem
FOXHUNT_TLS_AI_INTELLIGENCE_CERT=/home/jgrusewski/Work/foxhunt/certs/services/ai-intelligence/ai-intelligence-cert.pem
FOXHUNT_TLS_AI_INTELLIGENCE_KEY=/home/jgrusewski/Work/foxhunt/certs/services/ai-intelligence/ai-intelligence-key.pem
FOXHUNT_TLS_DATA_AGGREGATOR_CERT=/home/jgrusewski/Work/foxhunt/certs/services/data-aggregator/data-aggregator-cert.pem
FOXHUNT_TLS_DATA_AGGREGATOR_KEY=/home/jgrusewski/Work/foxhunt/certs/services/data-aggregator/data-aggregator-key.pem
FOXHUNT_TLS_INTEGRATION_HUB_CERT=/home/jgrusewski/Work/foxhunt/certs/services/integration-hub/integration-hub-cert.pem
FOXHUNT_TLS_INTEGRATION_HUB_KEY=/home/jgrusewski/Work/foxhunt/certs/services/integration-hub/integration-hub-key.pem