dojoConfig.yml

# Default config for godojo installations

Install:
  Version: "1.5.3.1" # Release version of DefectDojo from https://github.com/DefectDojo/django-DefectDojo/releases
  SourceInstall: true # If true, a souce code install will be installed overriding the version above ^
  SourceBranch: "dev" # The branch to be checked out if SourceInstall is true - HEAD will be checked out
  SourceCommit: bc39a2345af1860431633d91615f2c51de1b6cf2 # If there is a value here, the specific commit will be used over the branch ^
  Quiet: false # Suppress normal output - only errors will be shown
  Trace: true # Turn on the most verbose logging option
  Redact: true # Redact sensitive information from the logs
  Prompt: false # Prompt for configuration values - NOT IMPLEMENTED YET
  Set: "Single Server" # Pre-defined configuration options - NOT IMPLEMENTED YET
  Root: "/opt/dojo" # Note: No traiing /
  Source: "django-DefectDojo"
  Files: "local"
  Media: "media"
  Static: "static"
  App: "dojo"
  Sampledata: false
  PullSource: true # DEFAULT true
  # Venv: install.root
  DB:
    Engine: "MySQL" # Supported values: SQLite, MySQL, PostgreSQL, MariaDB - CASE sEnSiTiVE!
    Local: true
    Exists: false
    Ruser: "root" # The root aka super user for the database - this and Rpass below REQUIRED for remote and existing DBs
    Rpass: "vee0Thoanae1daePooz0ieka" # DB root user is used create Dojo DB configuration for either (1) remote DBs or (2) existing local DBs
    Name: "dojodb"
    User: "dojodbusr"
    Pass: "vee0Thoanae1daePooz0ieka"
    Host: "localhost"
    Port: 3306
    Drop: false
  OS:
    User: "dojo-srv"
    Pass: "wahlieboojoKa8aitheibai3"
    Group: "dojo-srv"
  Settings:
    Dist: "/dojo/settings/settings.dist.py"
    File: "/dojo/settings/settings.py"
    # Env: "/scripts/common/install-env" - this is no longer needed.  vestige of setup.bash
    Env: "/dojo/settings/.env.prod"
  Admin:
    User: "admin"
    Pass: "admin"
    Email: "admin@localhost"

Settings:
  Debug: true # false
  Login:
    Redirect:
      Url: "/"
  Django:
    Admin:
      Enabled: false
  Session:
    Cookie:
      HTTPOnly: true
  CSRF:
    Cookie:
      HTTPOnly: true
      Secure: false
  Secure:
    SSL:
      Redirect: false
    HSTS:
      Include:
        Subdomains: false
      Seconds: 31536000 # aka 1 year in seconds
    Browser:
        XSS:
          Filter: false
    Proxy:
      SSL:
        Header: false
  Time:
    Zone: "UTC"
  Lang: "en-us"
  Wkhtmltopdf: "/usr/local/bin/wkhtmltopdf"
  Team:
    Name: "Security Team"
  Admins: "DefectDojo:dojo@localhost,Admin:admin@localhost"
  Port:
    Scan:
      Contact:
        Email: "email@localhost"
      Result:
          Email:
            From: "email@localhost"
      External:
        Unit:
          Email:
            List: "['email@localhost']" # List of email addresses like ['email@ex.com'] or ['email@ex.com', 'another@ex.com']
      Source:
        IP: "127.0.0.1"
  Whitenoise: false
  Track:
    Migrations: false
  Test:
    Runner: "django.test.runner.DiscoverRunner"
    Database:
      Name: "test_defectdojo"
  URL:
    Prefix: ""
  Root: "" # Calculated based on install time config
  Language:
    Code: "en-us"
  Site:
    ID: 1
  Use:
    I18N: true
    L10N: true
    TZ: true
  Media:
    Root: "" # Calcuated based on install time config
    URL: "/media/"
  Static:
    Root: "" # Calcuated based on install time config
    URL: "/static/"
  Celery:
    Broker:
      URL: ""
      Scheme: "sqla_sqlite"
      User: ""
      Password: ""
      Host: ""
      Port: -1
      Path: "/dojo.celerydb.sqlite"
    Task:
      Ignore:
        Result: true
      Serializer: "pickle"
    Result:
      Backend: "django-db"
      Expires: 86400
    Beat:
      Schedule:
        Filename: "" # Calculated using DD_INSTALL_FILES + doj.celery.beat.db
  Force:
    Lowercase:
      Tags: true
  Max:
    Tag:
      Length: 25
  Database:
    Engine: "" # Calcuated based on install time config
    Host: "" # Calcuated based on install time config
    Name: "" # Calcuated based on install time config
    Password: "" # Calcuated based on install time config
    Port: "" # Calcuated based on install time config
    User: "" # Calcuated based on install time config
  Secret:
    Key: "." # If unchanged, a random value will be generated at install time
  Credential:
    AES:
      B256:
        Key: "." # If unchanged, a random value will be generated at install time
  Data:
    Upload:
      Max:
        Memory:
          Size: 8388608 # aka 8 mb
  Social:
    Auth:
      Google:
        OAUTH2:
          Key: ""
          Secret: ""
      Okta:
        OAUTH2:
          Key: ""
          Secret: ""
          API:
            URL: ""
  Allowed:
    Hosts: "localhost,127.0.0.1" # List of IP addresses or host names like ['192.168.1.42'] or ['dojo.ex.com', 'vuln.ex.com']
  Email:
      URL: "smtp://user@:password@localhost:25"