b9dfb86260
Security hardening release addressing CodeQL and Dependabot alerts: - Fix stack trace exposure in error responses - Add SSRF protection with DNS resolution checking - Implement proper URL hostname validation (replaces substring matching) - Add centralized path sanitization to prevent path traversal - Fix ReDoS vulnerability in email validation regex - Improve HTML sanitization in validation utilities - Fix capability wildcard matching in auth utilities - Update glob dependency to address CVE - Add CodeQL suppression comments for verified false positives 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
28 lines
528 B
Plaintext
28 lines
528 B
Plaintext
# GT 2.0 Resource Cluster Environment Variables
|
|
|
|
# Environment
|
|
ENVIRONMENT=development
|
|
DEBUG=true
|
|
|
|
# Security
|
|
SECRET_KEY=your-secret-key-here-change-in-production
|
|
|
|
# External LLM Providers
|
|
GROQ_API_KEY=your-groq-api-key
|
|
OPENAI_API_KEY=your-openai-api-key
|
|
ANTHROPIC_API_KEY=your-anthropic-api-key
|
|
|
|
# Service Ports
|
|
SERVICE_PORT=8003
|
|
PROMETHEUS_PORT=9091
|
|
|
|
# Consul Service Discovery (optional)
|
|
CONSUL_HOST=localhost
|
|
CONSUL_PORT=8500
|
|
|
|
# Redis
|
|
REDIS_URL=redis://localhost:6379/1
|
|
|
|
# ChromaDB
|
|
CHROMADB_HOST=localhost
|
|
CHROMADB_PORT=8000 |