# ============================================================================
# Security Configuration
# ============================================================================
# This file controls TLS settings, internal ports, and security keys.
# OAuth / authentication settings belong in .oauth_config (see .oauth_config_sample).
# ============================================================================

# ============================================================================
# TLS Configuration
# ============================================================================
# Enable HTTPS (recommended for production):
TA_AUTH_ENABLE_TLS=true
TA_LOCAL_INTERNAL_SERVER_PORT=9443
TA_LOCAL_INTERNAL_UI_PORT=3443
TA_LOCAL_INTERNAL_DB_PORT=6984

# Enable HTTP (development only):
# TA_AUTH_ENABLE_TLS=false
# TA_LOCAL_INTERNAL_SERVER_PORT=9080
# TA_LOCAL_INTERNAL_UI_PORT=3000
# TA_LOCAL_INTERNAL_DB_PORT=5984

# ============================================================================
# Security Keys (auto-generated if empty)
# ============================================================================
TA_API_KEY=                                                             # required for authentication and TLS, keep empty to auto-generate
TA_PRIVATE_KEY=                                                         # base64 encoded private key (PEM format), keep empty to auto-generate
TA_PUBLIC_KEY=                                                          # base64 encoded public key (CRT format), keep empty to auto-generate
TA_AES_IV=                                                              # AES IV (128 bits, hex), keep empty to auto-generate
TA_AES_KEY=                                                             # AES key (256 bits, hex), keep empty to auto-generate
