config.env.example

# PostgreSQL Management System (pgctl) Configuration
# ===================================================
# Copy this file to config.env and customize for your environment
# DO NOT commit config.env with sensitive data

# ===================
# Connection Settings
# ===================
PGHOST=localhost
PGPORT=5432
PGADMIN=postgres
PGPASSWORD=password
# PGDATABASE=postgres  # Default database for admin connections (change if 'postgres' doesn't exist)

# ===================
# SSL Settings (for AWS RDS and other remote servers)
# ===================
# PGSSLMODE=require              # Options: prefer, require, verify-ca, verify-full
# PGSSLROOTCERT=/path/to/rds-ca-bundle.pem  # Download from: https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem
# PGSSLCERT=/path/to/client-cert.pem        # Path to client certificate (for client certificate authentication)
# PGSSLKEY=/path/to/client-key.pem         # Path to client private key (for client certificate authentication)
# PGSSLCRL=/path/to/cert-revocation-list.pem  # Path to certificate revocation list file

# ===================
# Password Management
# ===================
# Passwords should be set via environment variables, not in this file.
# Set these before running pgctl commands:
#
# export PGPASSWORD=<admin_password>           # Admin connection password
#
# For database creation (optional - will prompt if not set):
# export DB_OWNER_PASSWORD=<password>          # Database owner
# export DB_MIGRATION_PASSWORD=<password>      # Migration user
# export DB_FULLACCESS_PASSWORD=<password>     # Full access user
# export DB_APP_PASSWORD=<password>            # App user
# export DB_READONLY_PASSWORD=<password>       # Read-only user
#
# For schema creation (optional - will prompt if not set):
# export SCHEMA_OWNER_PASSWORD=<password>      # Schema owner
# export SCHEMA_MIGRATION_PASSWORD=<password>  # Schema migration user
# export SCHEMA_FULLACCESS_PASSWORD=<password> # Schema full access user
# export SCHEMA_APP_PASSWORD=<password>        # Schema app user
# export SCHEMA_READONLY_PASSWORD=<password>   # Schema read-only user

# ===================
# Naming Conventions
# ===================
# Database users: {database}_{role}
# Schema users:   {database}_{schema}_{role}
#
# Roles: owner, migration_user, fullaccess_user, app_user, readonly_user

# ===================
# PostgreSQL Settings
# ===================
# Maximum identifier length (PostgreSQL limit)
PG_MAX_IDENTIFIER_LENGTH=63

# Default test database name
PG_TEST_DATABASE=pgctl_test