886ff6f9d2
- Remove zombie JobEngine WebService (no container runs it) - Remove dangling STELLAOPS_JOBENGINE_URL, replace with RELEASE_ORCHESTRATOR_URL - Update Timeline audit paths to release-orchestrator - Extract smremote to docker-compose.crypto-provider.smremote.yml - Rename crypto compose files for consistent naming - Add crypto provider health probe API (CP-001) + tenant preferences (CP-002) - Create sprint plans: crypto picker, VulnExplorer merge, scheduler plugins - Timeline merge prep: ingestion worker relocated to infrastructure lib Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
49 lines
1.7 KiB
Plaintext
49 lines
1.7 KiB
Plaintext
# =============================================================================
|
|
# STELLA OPS CHINA COMPLIANCE ENVIRONMENT
|
|
# =============================================================================
|
|
# Environment template for China (SM2/SM3/SM4) compliance deployments.
|
|
#
|
|
# Usage with simulation:
|
|
# cp env/compliance-china.env.example .env
|
|
# docker compose -f docker-compose.stella-ops.yml \
|
|
# -f docker-compose.compliance-china.yml \
|
|
# -f docker-compose.crypto-provider.crypto-sim.yml up -d
|
|
#
|
|
# Usage with SM Remote (production):
|
|
# docker compose -f docker-compose.stella-ops.yml \
|
|
# -f docker-compose.compliance-china.yml \
|
|
# -f docker-compose.crypto-provider.smremote.yml up -d
|
|
#
|
|
# =============================================================================
|
|
|
|
# Crypto profile
|
|
STELLAOPS_CRYPTO_PROFILE=china
|
|
|
|
# =============================================================================
|
|
# SM REMOTE SERVICE CONFIGURATION
|
|
# =============================================================================
|
|
|
|
SM_REMOTE_PORT=56080
|
|
|
|
# Software-only SM2 provider (for testing/development)
|
|
SM_SOFT_ALLOWED=1
|
|
|
|
# OSCCA-certified HSM configuration (for production)
|
|
# Set these when using a certified hardware security module
|
|
SM_REMOTE_HSM_URL=
|
|
SM_REMOTE_HSM_API_KEY=
|
|
SM_REMOTE_HSM_TIMEOUT=30000
|
|
|
|
# Client certificate authentication for HSM (optional)
|
|
SM_REMOTE_CLIENT_CERT_PATH=
|
|
SM_REMOTE_CLIENT_CERT_PASSWORD=
|
|
|
|
# =============================================================================
|
|
# CRYPTO SIMULATION (for testing only)
|
|
# =============================================================================
|
|
|
|
# Enable simulation mode
|
|
STELLAOPS_CRYPTO_ENABLE_SIM=1
|
|
STELLAOPS_CRYPTO_SIM_URL=http://sim-crypto:8080
|
|
SIM_CRYPTO_PORT=18090
|