mirror of
https://github.com/mblanke/ThreatHunt.git
synced 2026-03-01 05:50:21 -05:00
mblanke
9b98ab9614
- NetworkMap: hunt-scoped force-directed graph with click-to-inspect popover - NetworkMap: zoom/pan (wheel, drag, buttons), viewport transform - NetworkMap: clickable IP/Host/Domain/URL legend chips to filter node types - NetworkMap: brighter colors, 20% smaller nodes - DatasetViewer: IOC columns highlighted with colored headers + cell tinting - AUPScanner: hunt dropdown replacing dataset checkboxes, auto-select all - Rename 'Social Media (Personal)' theme to 'Social Media' with DB migration - Fix /api/hunts timeout: Dataset.rows lazy='noload' (was selectin cascade) - Add OS column mapping to normalizer - Full backend services, DB models, alembic migrations, new routes - New components: Dashboard, HuntManager, FileUpload, NetworkMap, etc. - Docker Compose deployment with nginx reverse proxy
54 lines
3.0 KiB
Plaintext
54 lines
3.0 KiB
Plaintext
# ── ThreatHunt Configuration ──────────────────────────────────────────
|
|
# All backend env vars are prefixed with TH_ and match AppConfig field names.
|
|
# Copy this file to .env and adjust values.
|
|
|
|
# ── General ───────────────────────────────────────────────────────────
|
|
TH_DEBUG=false
|
|
|
|
# ── Database ──────────────────────────────────────────────────────────
|
|
# SQLite for local dev (zero-config):
|
|
TH_DATABASE_URL=sqlite+aiosqlite:///./threathunt.db
|
|
# PostgreSQL for production:
|
|
# TH_DATABASE_URL=postgresql+asyncpg://threathunt:password@localhost:5432/threathunt
|
|
|
|
# ── CORS ──────────────────────────────────────────────────────────────
|
|
TH_ALLOWED_ORIGINS=http://localhost:3000,http://localhost:8000
|
|
|
|
# ── File uploads ──────────────────────────────────────────────────────
|
|
TH_MAX_UPLOAD_SIZE_MB=500
|
|
|
|
# ── LLM Cluster (Wile & Roadrunner) ──────────────────────────────────
|
|
TH_OPENWEBUI_URL=https://ai.guapo613.beer
|
|
TH_OPENWEBUI_API_KEY=
|
|
TH_WILE_HOST=100.110.190.12
|
|
TH_WILE_OLLAMA_PORT=11434
|
|
TH_ROADRUNNER_HOST=100.110.190.11
|
|
TH_ROADRUNNER_OLLAMA_PORT=11434
|
|
|
|
# ── Default models (auto-selected by TaskRouter) ─────────────────────
|
|
TH_DEFAULT_FAST_MODEL=llama3.1:latest
|
|
TH_DEFAULT_HEAVY_MODEL=llama3.1:70b-instruct-q4_K_M
|
|
TH_DEFAULT_CODE_MODEL=qwen2.5-coder:32b
|
|
TH_DEFAULT_VISION_MODEL=llama3.2-vision:11b
|
|
TH_DEFAULT_EMBEDDING_MODEL=bge-m3:latest
|
|
|
|
# ── Agent behaviour ──────────────────────────────────────────────────
|
|
TH_AGENT_MAX_TOKENS=2048
|
|
TH_AGENT_TEMPERATURE=0.3
|
|
TH_AGENT_HISTORY_LENGTH=10
|
|
TH_FILTER_SENSITIVE_DATA=true
|
|
|
|
# ── Enrichment API keys (optional) ───────────────────────────────────
|
|
TH_VIRUSTOTAL_API_KEY=
|
|
TH_ABUSEIPDB_API_KEY=
|
|
TH_SHODAN_API_KEY=
|
|
|
|
# ── Auth ─────────────────────────────────────────────────────────────
|
|
TH_JWT_SECRET=CHANGE-ME-IN-PRODUCTION-USE-A-REAL-SECRET
|
|
TH_JWT_ACCESS_TOKEN_MINUTES=60
|
|
TH_JWT_REFRESH_TOKEN_DAYS=7
|
|
|
|
# ── Frontend ─────────────────────────────────────────────────────────
|
|
REACT_APP_API_URL=http://localhost:8000
|
|
|