default.js

/**	
 * @fileoverview Production Cloud CNC Core Config
 * This config file uses sain defaults
 */

//Export	
module.exports = {
  //Settings for this core instance
  core: {
    //Access Control List (Controls what permissions each role has)	
    acl: {
      //List of roles
      roles: {
        //Role name
        admin: {
          //What permissions this role inherits
          inherits: 'user',

          //What permissions this role gains
          rules: [
            'accounts:all',
            'accounts:create',
            'accounts:impersonate:start',
            'controllers:all',
            'controllers:create',
            'controllers:key',
            'controllers:get',
            'controllers:update',
            'controllers:remove',
            'machines:create',
            'machines:update',
            'machines:remove'
          ]
        },
        //Role name
        user: {
          //What permissions this role gains
          rules: [
            'accounts:roles',
            'accounts:impersonate:stop',
            'accounts:get',
            'accounts:update',
            'accounts:remove',
            'files:all',
            'files:create',
            'files:get',
            'files:raw',
            'files:update',
            'files:remove',
            'trash:all',
            'trash:recover',
            'trash:remove',
            'machines:all',
            'machines:get',
            'machines:command',
            'machines:execute',
            'machines:startOutput',
            'machines:stopOutput'
          ]
        }
      }
    },

    //Cryptography options
    cryptography: {
      //TLS certificate	and key location (PEM encoded)
      cert: './config/cert.cer',
      key: './config/key.pem',

      //Self signed (Temporarily trust certificate when running healthcheck and tests)
      selfSigned: false,

      //Session secret location	(Used to generate session cookies, should be at least 512 bytes long)
      secret: './config/secret.txt',

      //[ADVANCED USERS ONLY] Length of OTP/MFA secret (Bytes)	
      otpSecretLength: 32,

      //[ADVANCED USERS ONLY] OTP/MFA window forgiveness (30 second units)	
      otpWindows: 1
    },

    //Persistant data storage
    data: {
      //Filesystem (Used for storing user files)	
      filesystem: './files/',

      //MongoDB URI	(Used to store entities)
      mongodb: 'mongodb://localhost:27017/cloud-cnc',

      //RedisDB URI (Used to store sessions and for socket sharing)
      redisdb: 'redis://localhost:6379'
    },

    //Logging settings
    logger: {
      //Logging directory (Only used when mode = file)
      directory: './logs/',

      //Logging mode (file = log to file, console = log to console, silent = don't log)
      mode: 'file'
    },

    //HTTP/Socket server options
    server: {
      //Allowed CORS domains/addresses
      cors: [],

      //Listening port	
      port: 443,

      //Session expire time (How long a login is good for) (Milliseconds)	
      sessionExpire: 1000 * 60 * 30,

      //Rate limit window (Milliseconds)	
      rateLimitWindow: 1000 * 60 * 15,

      //Maximum requests per rate limit window (0 to disable)
      rateLimitRequests: 100,

      //Max upload size	(How big are your files going to be)
      uploadLimit: '100mb'
    }
  },

  //Settings for connecting to controller(s)
  controller: {
    //How long to wait after pinging a controller before declaring it offline (Milliseconds)	
    timeout: 1000 * 3,

    //[ADVANCED USERS ONLY] Controller symmetric key length	(Used to authenticate controllers with the core) (Bytes)
    keyLength: 512
  }
};