10-layer defense pipeline with kill chain mapping, self-healing, self-learning, and compliance reporting. Local-first, zero cloud deps. - 72 detection rules across 7 kill chain phases - 294 unit tests, 500+ attack corpus samples - Management dashboard (Next.js 15, 10 pages) - Automated resistance testing (2x daily, 31 probes) - MITRE ATLAS, OWASP LLM Top 10, EU AI Act compliance - Integrations: Next.js middleware, Ollama, n8n - PostgreSQL 17 + pgvector for persistent learning
37 lines
1009 B
Plaintext
37 lines
1009 B
Plaintext
# ============================================================
|
|
# ShieldX Configuration
|
|
# ============================================================
|
|
|
|
# Database (PostgreSQL 17 + pgvector)
|
|
DATABASE_URL=postgresql://shieldx:shieldx_dev_password@localhost:5432/shieldx
|
|
DATABASE_POOL_SIZE=10
|
|
|
|
# Ollama (local LLM — for embeddings + guard model)
|
|
OLLAMA_ENDPOINT=http://localhost:11434
|
|
OLLAMA_EMBEDDING_MODEL=nomic-embed-text
|
|
OLLAMA_GUARD_MODEL=llama3.2
|
|
|
|
# Anthropic (optional — for API-based detection)
|
|
ANTHROPIC_API_KEY=
|
|
|
|
# Logging
|
|
SHIELDX_LOG_LEVEL=info
|
|
|
|
# Community / Federated Sync (opt-in, default OFF)
|
|
SHIELDX_COMMUNITY_SYNC=false
|
|
SHIELDX_COMMUNITY_SYNC_URL=
|
|
|
|
# Canary Tokens
|
|
SHIELDX_CANARY_SECRET=change-this-to-a-random-32-char-string
|
|
|
|
# Webhooks (optional — for incident notifications)
|
|
SHIELDX_WEBHOOK_URL=
|
|
SHIELDX_WEBHOOK_SECRET=
|
|
|
|
# Feature Flags
|
|
SHIELDX_ENABLE_PPA=true
|
|
SHIELDX_ENABLE_BEHAVIORAL=true
|
|
SHIELDX_ENABLE_MCP_GUARD=true
|
|
SHIELDX_ENABLE_SELF_CONSCIOUSNESS=false
|
|
SHIELDX_PPA_LEVEL=medium
|