# Environment Variables for Threat Intelligence Feeds
# Copy this to .env or set in your system environment
# =================
# SIMPLE ON/OFF SWITCHES
# =================
# Master switch - Enable/disable ALL automated threat intelligence
# Set to "true" to enable, "false" to disable all feeds
THREAT_INTEL_ENABLED=true
# Individual feed switches (only needed if master switch is true)
TOR_EXITS_ENABLED=true
SPAMHAUS_DROP_ENABLED=true
EMERGINGTHREATS_ENABLED=false
# =================
# PAID SERVICE API KEYS
# =================
# VirusTotal API Key
# Get yours at: https://www.virustotal.com/gui/my-apikey
# Uncomment and add your key to enable VirusTotal feeds
# VIRUSTOTAL_API_KEY=your_virustotal_api_key_here
# MaxMind License Key
# Get yours at: https://www.maxmind.com/en/accounts/current/license-key
# Uncomment and add your key to enable MaxMind proxy/VPN detection
# MAXMIND_LICENSE_KEY=your_maxmind_license_key_here
# Company Internal API Token (example)
# COMPANY_API_TOKEN=your_internal_api_token_here
# =================
# OPTIONAL CONFIGURATION
# =================
# How often to update feeds (in seconds) - Default: 3600 (1 hour)
THREAT_INTEL_UPDATE_INTERVAL=3600
# Where to store downloaded feeds - Default: ./threat-feeds
THREAT_INTEL_FEEDS_DIR=./threat-feeds
# HTTP timeout for downloads (in seconds) - Default: 30
THREAT_INTEL_TIMEOUT=30
