| # Licensed to the Apache Software Foundation (ASF) under one or more |
| # contributor license agreements. See the NOTICE file distributed with |
| # this work for additional information regarding copyright ownership. |
| # The ASF licenses this file to You under the Apache License, Version 2.0 |
| # (the "License"); you may not use this file except in compliance with |
| # the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| |
| # Fineract tenant identifier — matches the tenant in fineract_tenants DB |
| TENANT_ID=default |
| |
| # Operational database (Fineract writes loan/client/transaction data here) |
| SOURCE_DB_NAME=fineract_default |
| |
| # Tenants registry database |
| SOURCE_TENANTS_DB_NAME=fineract_tenants |
| |
| # Schema where BI compatibility views live (created by bootstrap_source.sh) |
| SOURCE_DB_SCHEMA=bi_connector_source |
| |
| # PostgreSQL superuser — used ONLY by bootstrap_source.sh to create views/grants |
| SOURCE_BOOTSTRAP_USER=root |
| SOURCE_BOOTSTRAP_PASSWORD=skdcnwauicn2ucnaecasdsajdnizucawencascdca |
| |
| # Fineract application user (owns the public schema tables) |
| SOURCE_APP_USER=postgres |
| SOURCE_APP_PASSWORD=skdcnwauicn2ucnaecasdsajdnizucawencascdca |
| |
| # Read-only user the extractor connects as |
| SOURCE_REPLICA_USER=fineract_reader |
| SOURCE_REPLICA_PASSWORD=fineract_reader_dev_only |
| |
| WAREHOUSE_DB_NAME=analytics |
| WAREHOUSE_DB_SCHEMA=raw |
| |
| # Admin role — used for schema management and Superset metadata DB only |
| WAREHOUSE_ADMIN_USER=analytics_admin |
| WAREHOUSE_ADMIN_PASSWORD=analytics_admin_dev_only |
| |
| # Loader role — used by the extractor and dbt (write access) |
| WAREHOUSE_LOADER_USER=analytics_loader |
| WAREHOUSE_LOADER_PASSWORD=analytics_loader_dev_only |
| |
| # Reader role — used by Superset for SELECT-only dashboard queries |
| WAREHOUSE_READER_USER=analytics_reader |
| WAREHOUSE_READER_PASSWORD=analytics_reader_dev_only |
| |
| PIPELINE_INTERVAL_SECONDS=3600 |
| |
| # Secret key — MUST be changed in production. Generate with: |
| # python -c "import secrets; print(secrets.token_hex(32))" |
| SUPERSET_SECRET_KEY=change_me_before_production_use_a_random_32_byte_hex |
| |
| # Admin account (full access to all dashboards and settings) |
| SUPERSET_ADMIN_USERNAME=admin |
| SUPERSET_ADMIN_FIRSTNAME=Admin |
| SUPERSET_ADMIN_LASTNAME=User |
| SUPERSET_ADMIN_EMAIL=admin@example.com |
| SUPERSET_ADMIN_PASSWORD=admin_dev_only |
| |
| # Branch manager accounts (row-level security scopes each user to their office) |
| SUPERSET_NORTH_MANAGER_PASSWORD=north_manager_dev_only |
| SUPERSET_SOUTH_MANAGER_PASSWORD=south_manager_dev_only |
