Files
SpecterOps-Nemesis/env.example
T
Lee Chagolla-Christensen c2dac2e8a7 Change DB access and update alerting
- Switch from using POSTGRES_CONNECTION_STRING to
  POSTGRES_USER/POSTGRES_PASSWORD/POSTGRES_DATABASE/etc.
- When no apprise URL is configured, use the test echo'ing endpoint
2025-10-18 21:36:27 -07:00

68 lines
2.4 KiB
Plaintext

MINIO_ROOT_PASSWORD=Qwerty12345
MINIO_ROOT_USER=nemesis
RABBITMQ_PASSWORD=Qwerty12345
RABBITMQ_USER=nemesis
POSTGRES_PASSWORD=Qwerty12345
POSTGRES_USER=nemesis
POSTGRES_HOST=postgres
POSTGRES_PORT=5432
POSTGRES_DB=enrichment
POSTGRES_PARAMETERS=sslmode=disable
# You can change the password used by HASURA. If not defined a default password will be used (pass456)
# Example:
# HASURA_ADMIN_SECRET=Qwerty12345
# NEMESIS_URL is used when building hyperlinks for findings and Apprise alerts.
# If you change the port Nemesis listens on using NEMESIS_PORT (below), ensure this URL's port matches.
# If using a host/domain name, a FQDN (with a top level domain) is recommended.
NEMESIS_URL=https://localhost:7443/
####################
# Optional Settings
####################
# Setup users using BASIC_AUTH_USERS (default is 'n:n'). Define multiple users by separating them with a comma.
# You can generate hashes for the users using various methods:
# - OpenSSL: printf "myusername:$(openssl passwd -apr1 'asdf')\n"
# - Via the CLI using the "htpasswd" command from the"apache2-utils" package:
# - echo asdf | htpasswd -nmi myusername
# - Online generator: https://htpasswd.utils.com/
#
# Example: Defining the users 'alice' and 'bob':
# BASIC_AUTH_USERS='alice:$apr1$dVGX3WZH$r2b86WcF/F0oSxVivfLMg.,bob:$apr1$ZJIjt2ti$nbXWdeIQfQzKmWSMTsrW9/'
# Change the port Nemesis listens using NEMESIS_PORT (default is 7443).
# - Ensure the NEMESIS_URL value also uses this port.
# Example:
# NEMESIS_PORT=7443
# Configure Apprise alerting using APPRISE_URLS.
# - See Apprise's docs for how to format each provider: https://github.com/caronc/apprise/wiki#notification-services
# - To route user feedback to a specific channel use "?tag=feedback" as shown in the example below.
# Otherwise, only alerts listed.
# - See the Alerting docs for more details: https://specterops.github.io/Nemesis/usage_guide/#alerting
# Example:
# APPRISE_URLS=slack://Nemesis@T...6x/#nemesis-testing,slack://Nemesis@T...k/#nemesis-feedback?tag=feedback
# (Optional) Set Jupyter credentials using JUPYTER_PASSWORD.
# If not defined, a random password will be generated and printed in the jupyter container's logs.
# Example:
# JUPYTER_PASSWORD=Qwerty12345
# (Optional) Enable Phoenix LLM tracing for Pydantic AI agents.
# Requires starting Nemesis with monitoring profile: ./tools/nemesis-ctl.sh start dev --monitoring
# Phoenix UI will be available at http://localhost:6006
# Example:
# PHOENIX_ENABLED=true