Refactor code structure for improved readability and maintainability; optimize performance in key functions.

deploy/compose/env/dev.env.example

@@ -1,47 +1,78 @@
-# Substitutions for docker-compose.dev.yaml
-MONGO_INITDB_ROOT_USERNAME=stellaops
-MONGO_INITDB_ROOT_PASSWORD=dev-password
-MINIO_ROOT_USER=stellaops
-MINIO_ROOT_PASSWORD=dev-minio-secret
-MINIO_CONSOLE_PORT=9001
+# Substitutions for docker-compose.dev.yaml
+
+# PostgreSQL Database
+POSTGRES_USER=stellaops
+POSTGRES_PASSWORD=dev-postgres-password
+POSTGRES_DB=stellaops_platform
+POSTGRES_PORT=5432
+
+# Valkey (Redis-compatible cache and messaging)
+VALKEY_PORT=6379
+
+# RustFS Object Storage
 RUSTFS_HTTP_PORT=8080
+
+# Authority (OAuth2/OIDC)
 AUTHORITY_ISSUER=https://authority.localtest.me
-AUTHORITY_PORT=8440
-SIGNER_POE_INTROSPECT_URL=https://licensing.svc.local/introspect
+AUTHORITY_PORT=8440
+
+# Signer
+SIGNER_POE_INTROSPECT_URL=https://licensing.svc.local/introspect
 SIGNER_PORT=8441
+
+# Attestor
 ATTESTOR_PORT=8442
-# Secrets for Issuer Directory are provided via issuer-directory.mongo.env (see etc/secrets/issuer-directory.mongo.secret.example).
+
+# Issuer Directory
 ISSUER_DIRECTORY_PORT=8447
-ISSUER_DIRECTORY_MONGO_CONNECTION_STRING=mongodb://${MONGO_INITDB_ROOT_USERNAME}:${MONGO_INITDB_ROOT_PASSWORD}@mongo:27017
 ISSUER_DIRECTORY_SEED_CSAF=true
+
+# Concelier
 CONCELIER_PORT=8445
+
+# Scanner
 SCANNER_WEB_PORT=8444
-UI_PORT=8443
-NATS_CLIENT_PORT=4222
 SCANNER_QUEUE_BROKER=nats://nats:4222
 SCANNER_EVENTS_ENABLED=false
-SCANNER_EVENTS_DRIVER=redis
-# Leave SCANNER_EVENTS_DSN empty to inherit the Redis queue DSN when SCANNER_QUEUE_BROKER uses redis://.
-SCANNER_EVENTS_DSN=
+SCANNER_EVENTS_DRIVER=valkey
+SCANNER_EVENTS_DSN=valkey:6379
 SCANNER_EVENTS_STREAM=stella.events
 SCANNER_EVENTS_PUBLISH_TIMEOUT_SECONDS=5
 SCANNER_EVENTS_MAX_STREAM_LENGTH=10000
-# Surface.Env defaults keep worker/web service aligned with local RustFS and inline secrets.
+
+# Surface.Env defaults keep worker/web service aligned with local RustFS and inline secrets
 SCANNER_SURFACE_FS_ENDPOINT=http://rustfs:8080/api/v1
 SCANNER_SURFACE_CACHE_ROOT=/var/lib/stellaops/surface
 SCANNER_SURFACE_SECRETS_PROVIDER=inline
 SCANNER_SURFACE_SECRETS_ROOT=
+
 # Zastava inherits Scanner defaults; override if Observer/Webhook diverge
 ZASTAVA_SURFACE_FS_ENDPOINT=${SCANNER_SURFACE_FS_ENDPOINT}
 ZASTAVA_SURFACE_CACHE_ROOT=${SCANNER_SURFACE_CACHE_ROOT}
 ZASTAVA_SURFACE_SECRETS_PROVIDER=${SCANNER_SURFACE_SECRETS_PROVIDER}
 ZASTAVA_SURFACE_SECRETS_ROOT=${SCANNER_SURFACE_SECRETS_ROOT}
+
+# Scheduler
 SCHEDULER_QUEUE_KIND=Nats
 SCHEDULER_QUEUE_NATS_URL=nats://nats:4222
-SCHEDULER_STORAGE_DATABASE=stellaops_scheduler
 SCHEDULER_SCANNER_BASEADDRESS=http://scanner-web:8444
+
+# Notify
+NOTIFY_WEB_PORT=8446
+
+# Advisory AI
 ADVISORY_AI_WEB_PORT=8448
 ADVISORY_AI_SBOM_BASEADDRESS=http://scanner-web:8444
 ADVISORY_AI_INFERENCE_MODE=Local
 ADVISORY_AI_REMOTE_BASEADDRESS=
 ADVISORY_AI_REMOTE_APIKEY=
+
+# Web UI
+UI_PORT=8443
+
+# NATS
+NATS_CLIENT_PORT=4222
+
+# CryptoPro (optional)
+CRYPTOPRO_PORT=18080
+CRYPTOPRO_ACCEPT_EULA=0