86 lines
3.3 KiB
Plaintext
86 lines
3.3 KiB
Plaintext
# Harbor Desk / 巡樓 — 本機／dev 部署環境
|
||
# 用法：cp deploy/.env.example deploy/.env.dev 再改密鑰
|
||
# 腳本讀：deploy/.env.dev（優先）或 deploy/.env
|
||
|
||
# ---------- 公開網域（瀏覽器、PublicBaseURL、信件連結）----------
|
||
PUBLIC_HOST=threads-tool-dev.30cm.net
|
||
PUBLIC_WEB_BASE=https://threads-tool-dev.30cm.net
|
||
# 頭像等公開前綴 = 同源 /haixun-assets（Vite proxy 或 nginx → MinIO）
|
||
HAIXUN_STORAGE_S3_PUBLIC_BASE_URL=https://threads-tool-dev.30cm.net/haixun-assets
|
||
|
||
# ---------- Infra 埠（只綁 127.0.0.1）----------
|
||
MONGO_PORT=27017
|
||
REDIS_PORT=6379
|
||
MINIO_API_PORT=9000
|
||
MINIO_CONSOLE_PORT=9001
|
||
MAILPIT_SMTP_PORT=1025
|
||
MAILPIT_UI_PORT=8025
|
||
|
||
# ---------- Mongo ----------
|
||
MONGO_ROOT_USER=haixun
|
||
MONGO_ROOT_PASSWORD=CHANGE_ME_MONGO
|
||
MONGO_DATABASE=haixun
|
||
# gateway / migrate 用（密碼若含特殊字元請 URL-encode）
|
||
MONGO_URI=mongodb://haixun:CHANGE_ME_MONGO@127.0.0.1:27017/?authSource=admin
|
||
# golang-migrate 需要 URI 帶 database 名
|
||
MONGO_URL=mongodb://haixun:CHANGE_ME_MONGO@127.0.0.1:27017/haixun?authSource=admin
|
||
HAIXUN_MONGO_URI=mongodb://haixun:CHANGE_ME_MONGO@127.0.0.1:27017/?authSource=admin
|
||
HAIXUN_MONGO_DB=haixun
|
||
|
||
# ---------- Redis（monc 快取；必填 Pass）----------
|
||
REDIS_PASSWORD=CHANGE_ME_REDIS
|
||
HAIXUN_REDIS_ADDR=127.0.0.1:6379
|
||
HAIXUN_REDIS_PASSWORD=CHANGE_ME_REDIS
|
||
REDIS_NAMESPACE=haixun:dev:v1
|
||
# openssl rand -hex 32；不可與 JWT／BYOK encryption key 共用
|
||
AI_MODEL_CACHE_FINGERPRINT_SECRET=CHANGE_ME_AI_MODEL_CACHE_FINGERPRINT_SECRET
|
||
|
||
# ---------- Member BYOK AES-256-GCM（openssl rand -base64 32）----------
|
||
# 上線後需永久保留；gateway／worker 必須使用相同 key ID 與 key
|
||
MEMBER_SETTINGS_ENCRYPTION_KEY_ID=v1
|
||
MEMBER_SETTINGS_ENCRYPTION_KEY=CHANGE_ME_MEMBER_SETTINGS_ENCRYPTION_KEY
|
||
|
||
# ---------- MinIO（AccessKey 建議與 ROOT 相同）----------
|
||
MINIO_ROOT_USER=haixun
|
||
MINIO_ROOT_PASSWORD=CHANGE_ME_MINIO
|
||
HAIXUN_STORAGE_S3_ENDPOINT=http://127.0.0.1:9000
|
||
HAIXUN_STORAGE_S3_REGION=us-east-1
|
||
HAIXUN_STORAGE_S3_BUCKET=haixun-assets
|
||
HAIXUN_STORAGE_S3_ACCESS_KEY=haixun
|
||
HAIXUN_STORAGE_S3_SECRET_KEY=CHANGE_ME_MINIO
|
||
HAIXUN_STORAGE_S3_USE_PATH_STYLE=true
|
||
|
||
# ---------- JWT（gateway Auth.*）----------
|
||
# openssl rand -base64 48
|
||
AUTH_ACCESS_SECRET=CHANGE_ME_JWT_ACCESS
|
||
AUTH_REFRESH_SECRET=CHANGE_ME_JWT_REFRESH
|
||
HAIXUN_JWT_ACCESS_SECRET=CHANGE_ME_JWT_ACCESS
|
||
HAIXUN_JWT_REFRESH_SECRET=CHANGE_ME_JWT_REFRESH
|
||
|
||
# ---------- Stripe subscriptions ----------
|
||
# Disabled is startup-safe; billing endpoints return 503 until fully configured.
|
||
STRIPE_ENABLED=false
|
||
STRIPE_SECRET_KEY=
|
||
STRIPE_WEBHOOK_SECRET=
|
||
STRIPE_STARTER_PRICE_ID=
|
||
STRIPE_PRO_PRICE_ID=
|
||
STRIPE_SUCCESS_URL=https://threads-tool-dev.30cm.net/app/usage/checkout?result=success&checkout_id={CHECKOUT_ID}&plan={PLAN_ID}
|
||
STRIPE_CANCEL_URL=https://threads-tool-dev.30cm.net/app/usage/checkout?result=cancel&plan={PLAN_ID}
|
||
STRIPE_PORTAL_RETURN_URL=https://threads-tool-dev.30cm.net/app/usage/plans
|
||
|
||
# ---------- Mail（dev → Mailpit）----------
|
||
HAIXUN_SMTP_HOST=127.0.0.1
|
||
HAIXUN_SMTP_PORT=1025
|
||
HAIXUN_SMTP_USERNAME=
|
||
HAIXUN_SMTP_PASSWORD=
|
||
HAIXUN_SMTP_FROM="Harbor Desk <noreply@haixun.local>"
|
||
MAIL_SENDER="Harbor Desk <noreply@haixun.local>"
|
||
PUBLIC_WEB_BASE=https://threads-tool-dev.30cm.net
|
||
|
||
# ---------- App 埠 ----------
|
||
GATEWAY_PORT=8888
|
||
WEB_PORT=5173
|
||
|
||
# ---------- 相容別名（舊腳本）----------
|
||
HAIXUN_BACKEND_URL=http://127.0.0.1:8888
|