886ff6f9d2
- Remove zombie JobEngine WebService (no container runs it) - Remove dangling STELLAOPS_JOBENGINE_URL, replace with RELEASE_ORCHESTRATOR_URL - Update Timeline audit paths to release-orchestrator - Extract smremote to docker-compose.crypto-provider.smremote.yml - Rename crypto compose files for consistent naming - Add crypto provider health probe API (CP-001) + tenant preferences (CP-002) - Create sprint plans: crypto picker, VulnExplorer merge, scheduler plugins - Timeline merge prep: ingestion worker relocated to infrastructure lib Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
52 lines
1.9 KiB
Plaintext
52 lines
1.9 KiB
Plaintext
# =============================================================================
|
|
# STELLA OPS RUSSIA COMPLIANCE ENVIRONMENT
|
|
# =============================================================================
|
|
# Environment template for Russia (GOST R 34.10-2012) compliance deployments.
|
|
#
|
|
# Usage with simulation:
|
|
# cp env/compliance-russia.env.example .env
|
|
# docker compose -f docker-compose.stella-ops.yml \
|
|
# -f docker-compose.compliance-russia.yml \
|
|
# -f docker-compose.crypto-provider.crypto-sim.yml up -d
|
|
#
|
|
# Usage with CryptoPro CSP (production):
|
|
# CRYPTOPRO_ACCEPT_EULA=1 docker compose -f docker-compose.stella-ops.yml \
|
|
# -f docker-compose.compliance-russia.yml \
|
|
# -f docker-compose.crypto-provider.cryptopro.yml up -d
|
|
#
|
|
# =============================================================================
|
|
|
|
# Crypto profile
|
|
STELLAOPS_CRYPTO_PROFILE=russia
|
|
|
|
# =============================================================================
|
|
# CRYPTOPRO CSP CONFIGURATION
|
|
# =============================================================================
|
|
|
|
CRYPTOPRO_PORT=18080
|
|
|
|
# IMPORTANT: Set to 1 to accept CryptoPro EULA (required for production)
|
|
CRYPTOPRO_ACCEPT_EULA=0
|
|
|
|
# CryptoPro container settings
|
|
CRYPTOPRO_CONTAINER_NAME=stellaops-signing
|
|
CRYPTOPRO_USE_MACHINE_STORE=true
|
|
CRYPTOPRO_PROVIDER_TYPE=80
|
|
|
|
# =============================================================================
|
|
# GOST ALGORITHM CONFIGURATION
|
|
# =============================================================================
|
|
|
|
# Default GOST algorithms
|
|
CRYPTOPRO_GOST_SIGNATURE_ALGORITHM=GOST R 34.10-2012
|
|
CRYPTOPRO_GOST_HASH_ALGORITHM=GOST R 34.11-2012
|
|
|
|
# =============================================================================
|
|
# CRYPTO SIMULATION (for testing only)
|
|
# =============================================================================
|
|
|
|
# Enable simulation mode
|
|
STELLAOPS_CRYPTO_ENABLE_SIM=1
|
|
STELLAOPS_CRYPTO_SIM_URL=http://sim-crypto:8080
|
|
SIM_CRYPTO_PORT=18090
|