exafs/config.example.py at main · CESNET/exafs · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
class Config:
    """
    Default config options
    """

    # config ExaBGP major version
    EXABGP_MAJOR_VERSION = 4

    # Locale for Babel
    BABEL_DEFAULT_LOCALE = "en_US_POSIX"
    # Limits
    FLOWSPEC4_MAX_RULES = 9000
    FLOWSPEC6_MAX_RULES = 9000
    RTBH_MAX_RULES = 100000

    # Choose your authentication method and set it to True here or
    # the production / development config
    # SSO auth enabled
    SSO_AUTH = False
    # Authentication is done outside the app, use HTTP header to get the user uuid.
    # If SSO_AUTH is set to True, this option is ignored and SSO auth is used.
    HEADER_AUTH = False
    # Local authentication - used when SSO_AUTH and HEADER_AUTH are set to False
    LOCAL_AUTH = False

    # Name of HTTP header containing the UUID of authenticated user.
    # Only used when HEADER_AUTH is set to True
    AUTH_HEADER_NAME = "X-Authenticated-User"
    # SSO LOGOUT
    LOGOUT_URL = "https://flowspec.example.com/Shibboleth.sso/Logout"
    # SQL Alchemy config
    SQLALCHEMY_TRACK_MODIFICATIONS = False

    # ExaApi configuration
    # possible values HTTP, RABBIT
    EXA_API = "RABBIT"
    # for HTTP EXA_API_URL must be specified
    EXA_API_URL = "http://localhost:5000/"
    # for RABBITMQ EXA_API_RABBIT_* must be specified
    EXA_API_RABBIT_HOST = "your rabbit host"
    EXA_API_RABBIT_PORT = "rabit port (5672)"
    EXA_API_RABBIT_PASS = "some secret password"
    EXA_API_RABBIT_USER = "rabbit user"
    EXA_API_RABBIT_VHOST = "rabbit vhost"
    EXA_API_RABBIT_QUEUE = "exa_api"

    # Secret keys for Flask Session and JWT (API and CSRF protection)
    JWT_SECRET = "GenerateSomeLongRandomSequence"
    SECRET_KEY = "GenerateSomeLongRandomSequence"

    # APP Name - display in main toolbar
    APP_NAME = "ExaFS"
    # Route Distinguisher for VRF
    # When True set your rd string and label to be used in messages
    USE_RD = True
    RD_STRING = "7654:3210"
    RD_LABEL = "label for RD"

    # list of RTBH Communities that are allowed to be used in whitelist, real ID from DB
    ALLOWED_COMMUNITIES = [1, 2, 3]

    # treshold for expired rule retation in days
    EXPIRATION_THRESHOLD = 30


class ProductionConfig(Config):
    """
    Production config options
    """

    # SQL Alchemy config string - mustl include user and pwd
    SQLALCHEMY_DATABASE_URI = "Your Productionl Database URI"
    # Public IP of the production machine
    LOCAL_IP = "127.0.0.1"
    LOCAL_IP6 = "::ffff:127.0.0.1"
    # SSO AUTH enabled in produciion
    SSO_AUTH = True
    SSO_ATTRIBUTE_MAP = {
        "eppn": (False, "eppn"),
        "HTTP_X_EPPN": (False, "eppn"),
    }
    SSO_LOGIN_URL = "/login"

    # Set true if you need debug in production
    DEBUG = False
    DEVEL = False

    # is production behind a reverse proxy?
    BEHIND_PROXY = True

    # Set cookie behavior
    SESSION_COOKIE_SECURE = (True,)
    SESSION_COOKIE_HTTPONLY = (True,)
    SESSION_COOKIE_SAMESITE = ("Lax",)


class DevelopmentConfig(Config):
    """
    Development config options - usually for localhost development and debugging process
    """

    SQLALCHEMY_DATABASE_URI = "Your Local Database URI"
    LOCAL_IP = "127.0.0.1"
    LOCAL_IP6 = "::ffff:127.0.0.1"

    # Debug and Devel mode enabled
    DEBUG = True
    DEVEL = True

    # LOCAL user parameters - when the app is used without SSO_AUTH
    # Local User must be in the database
    LOCAL_USER_UUID = "admin@example.com"
    LOCAL_AUTH = True


class TestingConfig(Config):
    TESTING = True