Skip to main content

Configuration

The following settings are available. To change settings edit the file conf/production.py in the project root directory. If the file does not yet exist, you may need to create it.

Core​

Configure basic settings like allowed host header values and CSRF and CORS origins.

CORS_ALLOWED_ORIGINS = ["https://localhost", "https://pecoret.lan"]
CSRF_TRUSTED_ORIGINS = ["https://pecoret.lan", "https://pecoret.lan:8443"]
ALLOWED_HOSTS = ["pecoret.lan", "pecoret.lan:8443"]

# only required, if you serve frontend and server in different origins, otherwise Strict
CSRF_COOKIE_SAMESITE = 'None'
SESSION_COOKIE_SAMESITE = 'None'


# Do not turn on DEBUG in production!
DEBUG = False

Database​

by default, a SQlite database is used, which is not recommended for production environments.

Configure postgres instead:

DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.postgresql',
        'HOST': 'localhost',
        'NAME': 'pecoret',
        'USER': 'pecoret',
        'PASSWORD': 'somepassword'
    }
}

Advisories​

Define the default advisory template that is used. The template name must match the name of the report template.

ADVISORY_TEMPLATE = "my_customizations"

Attack Surface​

# enable the scanning feature to allow users to queue scans
AS_ENABLE_SCANNING = True

# only enqueue these scan types when a new item is created (e.g. only enrich ASN data an perform quick TCP port scans)
AS_ALLOWED_SCAN_TYPES_ON_CREATION = [
    'nmap-quick-tcp',
    'asn-enrich'
]