##### Version of this instance.
VERSION=5.1.1-RELEASE
LOG_LEVEL=INFO

###################################################################
###################### Server configuration #######################
###################################################################

##### Hostname
# Example: tc03.ext.difuture.imedis.med.tum.de
SERVER_NAME=

##### Port
SERVER_PORT=443

##### URL of the keycloak server
# Example: https://keycloak.example
# Note: Avoid trailing slashes!
KEYCLOAK_SERVER_NAME=

#### Keycloak server type (Internal or External)
# Default: External.
# Note: Use Internal only for testing purposes.
KEYCLOAK_SERVER_TYPE=External

##### Password for the keycloak admin user (must be set if 'KEYCLOAK_SERVER_TYPE'==Internal)
KEYCLOAK_ADMIN_PW=

##### Docker registry prefix (mind the tailing slash!)
# Example: artifactory.medic.uni-tuebingen.de/docker-release/
DOCKER_REGISTRY_PREFIX=

# Grafana admin password
GF_SECURITY_ADMIN_PASSWORD=

# Prometheus scrape interval
PROMETHEUS_GLOBAL_SCRAPE_INTERVAL=120s

############################################## Simple Gauge Metrics
# Number of patients
MONITORING_METRIC_RESOURCE_COUNT_PATIENT=true
# Number of encounter
MONITORING_METRIC_RESOURCE_COUNT_ENCOUNTER=true
# Number of other resources
MONITORING_METRIC_RESOURCE_COUNT_REFERENCE=true

############################################### Multi Gauge metrics

# Number of patient pseudonyms per target system
MONITORING_METRIC_PSEUDONYM_COUNT_PATIENT=true
# Number of encounter pseudonyms per target system
MONITORING_METRIC_PSEUDONYM_COUNT_ENCOUNTER=true
# Number of reference pseudonyms per target system
MONITORING_METRIC_PSEUDONYM_COUNT_REFERENCE=true
# Number of depsn operations
MONITORING_METRIC_DEPSN_COUNT=true

# Required for multi gauge metrics
MONITORING_SCHEDULING_ENABLED=true
MONITORING_SCHEDULING_DELAY=1000

# Enable or disable mail service globally
MAIL_SERVICE_ENABLED=false
# Mail server host name, e.g. postout.lrz.de
MAIL_SERVICE_HOST=
# Mail server port, e.g. 587
MAIL_SERVICE_PORT=
# Username associated with the mail server account
MAIL_SERVICE_USERNAME=
# Password associated with the mail server account
MAIL_SERVICE_PASSWORD=
# Email address associated with the mail server account
MAIL_SERVICE_FROM_EMAIL=
# Recipients; a list of email addresses in the correct format, separated by ',', e.g. "user1@tum.de,user2@tum.de"
MAIL_SERVICE_TO_EMAIL=

#### Spring security user
SPRING_SECURITY_USER_NAME=

#### Spring security password
SPRING_SECURITY_USER_PW=

#### Client secret of the keycloak client 'trustcenter-interface'
# Needs to be looked up in the keycloak server defined in 'KEYCLOAK_SERVER_NAME'
TC_INTERFACE_CLIENT_SECRET=

#### Number of parallel threads used for pseudonymization
# Minimum: 1
# Default: 8
# Maximum: 0.5*#available processors
PSN_PARALLELISM_LEVEL=

###################################################################
###################### Level-1 PSN Service ########################
###################################################################

#### Flag indicating whether to process masterdata
# Note: In the default case, this flag should be set to 'true'. In that case, in addition
# to identifiers, patient masterdata will be stored. Only if this instance is to be used for
# second-level, or project-specific, pseudonymization, should this flag be set to 'false'.
LEVEL_1_PSNS_ENABLE_MASTERDATA=

#### Limit on the search result, the number of entries that will maximally be shown in the GUI
LEVEL_1_PSNS_SLIMIT=30

#### Alphabets used for pseudonym generation
# The string contains alphabets separated by ';'. The alphabets are comprised of the
# three components 'system', 'length' and 'chars' separated by ':'.
# Example: "system-1:10:ABC;system-2:15:123ABC"
LEVEL_1_PSNS_ALPHABETS=

############################ Database #############################

#### Username
LEVEL_1_PSNS_DB_UNAME=

#### Password
LEVEL_1_PSNS_DB_PW=

#### Encryption password
LEVEL_1_PSNS_DB_ENC_PW=

###################### Transport encryption #######################

#### Flag indicating whether pseudonyms (created from 'v1/process') should
# be encrypted by default. This flag applies to queries sent to 'v1/process' without specifying
# a target system or in case the target system is unknown.
# IF set to true, a public key 'default.pubkey' has to be provided in '/config/keys/entitylist'
LEVEL_1_PSNS_ENC_DEFAULT_CASE_ENABLED=true
#### String containing target system, for which pseudonym encryption should be enabled or disabled.
# Example: test-system;test-system-2 (systems have to be separated by semicolon.
# Important: IF a target system is specified here, a public key '<target-system>.pubkey' can be provided
# in '/config/keys/entitylist', which will then be used to encrypt the corresponding pseudonym. If no key
# is provided, encryption will be turned of for this target system.
LEVEL_1_PSNS_ENC_TARGET_SYSTEMS_STRING=

####################### Bloomfilter config ########################

LEVEL_1_BF_ENABLED=false
LEVEL_1_BF_BALANCED_SEED=
LEVEL_1_BF_BIRTH_DATE_SEED=
LEVEL_1_BF_BITS_PER_NGRAM=
LEVEL_1_BF_FIRST_NAME_SEED=
LEVEL_1_BF_GENDER_SEED=
LEVEL_1_BF_LAST_NAME_SEED=
LEVEL_1_BF_LENGTH=

###################################################################
###################### Level-2 PSN Service ########################
# Note: This whole section is only relevant, if one single trustcenter
# instance should perform 2-tier-pseudonymization (IDAT->PID, PID->PSN).
# In most cases, the remainder of the parameters can be omitted.
###################################################################

#### Flag indicating whether this instance should run with two-level pseudonymization
#### Set 'true' to enable. 'false' is default.
DOUBLE_PSEUDONYMIZATION=false

#### Limit on the search result, the number of entries that will maximally be shown in the GUI
LEVEL_2_PSNS_SLIMIT=30

#### Alphabets used for pseudonym generation
LEVEL_2_PSNS_ALPHABETS=

############################ Database #############################

#### Username
LEVEL_2_PSNS_DB_UNAME=

#### Password
LEVEL_2_PSNS_DB_PW=

#### Encryption password
LEVEL_2_PSNS_DB_ENC_PW=

###################### Transport encryption #######################

#### Flag indicating whether pseudonyms (created from 'v1/process') should
# be encrypted by default. This flag applies to queries sent to 'v1/process' without specifying
# a target system or in case the target system is unknown.
# IF set to true, a public key 'default.pubkey' has to be provided in '/config/keys/psns'
LEVEL_2_PSNS_ENC_DEFAULT_CASE_ENABLED=true
#### String containing target system, for which pseudonym encryption should be enabled or disabled.
# Example: test-system;test-system-2 (systems have to be separated by semicolon.
# Important: IF a target system is specified here, a public key '<target-system>.pubkey' can be provided
# in '/config/keys/psns', which will then be used to encrypt the corresponding pseudonym. If no key
# is provided, encryption will be turned of for this target system.
LEVEL_2_PSNS_ENC_TARGET_SYSTEMS_STRING=