LOT 1 - Optimizare script build -Instalare mono comanda

ai_platform/modules/domain_check/.env.example

@@ -0,0 +1,172 @@
+# ===========================================
+# Domain Check API - Environment Configuration
+# ===========================================
+# Port Schema: Dev (5xxxx), Prod (1xxxx)
+# ===========================================
+
+# ===========================================
+# Registry Configuration (pentru deploy din GitLab)
+# ===========================================
+REGISTRY_IMAGE=didiai-domain-check
+IMAGE_TAG=latest
+
+# ===========================================
+# Database Configuration
+# Port: x20xx = Databases/PostgreSQL
+# ===========================================
+
+# SCHIMBA PAROLA pentru productie!
+# Genereaza cu: openssl rand -base64 24 | tr -dc 'a-zA-Z0-9' | head -c 24
+DB_PASSWORD=DnsCheck2026!Secure
+
+DB_USER=dns_admin
+DB_NAME=domain_check
+DB_HOST=domain_check_postgres
+DB_PORT=5432
+
+# Port producție conform schema (x20xx = PostgreSQL)
+DB_EXTERNAL_PORT=12000
+
+# ===========================================
+# Redis Configuration
+# Port: x23xx = Cache/Redis
+# ===========================================
+REDIS_HOST=domain_check_redis
+REDIS_PORT=6379
+
+# Port producție conform schema (x23xx = Redis)
+REDIS_EXTERNAL_PORT=12300
+
+REDIS_DB=0
+REDIS_PASSWORD=
+
+# ===========================================
+# API Keys
+# ===========================================
+
+# WHOXY API Key - obtine de la https://www.whoxy.com/
+WHOXY_API_KEY=876528325417e0bgs418d2cc7d8f193a6
+
+# VIRUSTOTAL API Key (optional) - obtine de la https://www.virustotal.com/
+VIRUSTOTAL_API_KEY=4d7afdff71c977a178b07d25b58c36660c416e3e9b1bf7ee8efaaf94aa02d0bc
+
+# ===========================================
+# Application Settings
+# ===========================================
+
+# SCHIMBA pentru productie: production
+FLASK_ENV=development
+
+FLASK_APP=run.py
+
+# SCHIMBA SECRET_KEY pentru productie!
+# Genereaza cu: openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | head -c 32
+SECRET_KEY=dns-check-secret-key-2026-change-in-production
+
+LOG_LEVEL=INFO
+
+# SCHIMBA pentru productie: False
+DEBUG=True
+
+# ===========================================
+# API Configuration
+# Port: x1xxx = API/Gateway
+# ===========================================
+API_HOST=0.0.0.0
+
+# Port producție conform schema (x1xxx = API/Gateway)
+API_PORT=11000
+
+API_VERSION=v1
+
+# ===========================================
+# Cache TTL (seconds)
+# ===========================================
+REDIS_TTL_HOT=21600        # 6 hours
+REDIS_TTL_WARM=86400       # 24 hours
+REDIS_TTL_COLD=604800      # 7 days
+
+# ===========================================
+# Risk Score Thresholds
+# ===========================================
+RISK_THRESHOLD_LOW=30
+RISK_THRESHOLD_MEDIUM=60
+RISK_THRESHOLD_HIGH=85
+
+# ===========================================
+# Domain Age Thresholds (days)
+# ===========================================
+DOMAIN_AGE_CRITICAL=90     # < 3 months
+DOMAIN_AGE_HIGH=180        # < 6 months
+DOMAIN_AGE_MEDIUM=365      # < 1 year
+
+# ===========================================
+# API Rate Limiting
+# ===========================================
+WHOXY_DAILY_LIMIT=8000
+VIRUSTOTAL_DAILY_LIMIT=500
+
+# ===========================================
+# Batch Processing
+# ===========================================
+BATCH_CHUNK_SIZE=50
+BATCH_TIMEOUT_SECONDS=300
+
+# ===========================================
+# Celery Configuration
+# ===========================================
+CELERY_BROKER_URL=redis://domain_check_redis:6379/1
+CELERY_RESULT_BACKEND=redis://domain_check_redis:6379/2
+
+# ===========================================
+# Monitoring (optional)
+# ===========================================
+SENTRY_DSN=
+DATADOG_API_KEY=
+
+# ===========================================
+# Security Settings (PRODUCTIE)
+# ===========================================
+
+# CORS Origins - Lista domeniilor permise (separate prin virgula)
+# Default: * (permite toate - DOAR pentru development!)
+# Productie: specifica domeniile tale
+# Exemplu: CORS_ORIGINS=https://didi.example.ro,https://example.ro
+CORS_ORIGINS=*
+
+# Dezactiveaza Swagger UI si ReDoc (ascunde /docs si /redoc)
+# Default: false (development)
+# Productie: true
+DISABLE_SWAGGER=false
+
+# Health endpoint simplificat (returneaza doar {"status":"ok"})
+# Default: false (development - returneaza detalii complete)
+# Productie: true (ascunde informatii despre sistem)
+SIMPLE_HEALTH=false
+
+# ===========================================
+# QUICK SETUP pentru server DEVELOPMENT:
+# ===========================================
+# 1. cp .env.example .env
+# 2. docker compose up -d --build
+# 3. curl http://localhost:11000/health
+# ===========================================
+
+# ===========================================
+# QUICK SETUP pentru server PRODUCTION:
+# ===========================================
+# 1. cp .env.example .env
+# 2. Modifica valorile pentru productie:
+#    sed -i 's/FLASK_ENV=development/FLASK_ENV=production/' .env
+#    sed -i 's/DEBUG=True/DEBUG=False/' .env
+#    sed -i 's/CORS_ORIGINS=\*/CORS_ORIGINS=https:\/\/your-domain.com/' .env
+#    sed -i 's/DISABLE_SWAGGER=false/DISABLE_SWAGGER=true/' .env
+#    sed -i 's/SIMPLE_HEALTH=false/SIMPLE_HEALTH=true/' .env
+# 3. Genereaza parole securizate:
+#    DB_PASS=$(openssl rand -base64 24 | tr -dc 'a-zA-Z0-9' | head -c 24)
+#    SECRET=$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | head -c 32)
+#    sed -i "s/DnsCheck2026\!Secure/$DB_PASS/" .env
+#    sed -i "s/dns-check-secret-key-2026-change-in-production/$SECRET/" .env
+# 4. docker compose up -d
+# 5. curl http://localhost:11000/health
+# ===========================================