.env.example

# LinX (灵枢) - Environment Configuration
# Copy this file to .env and update with your actual values

# ============================================================================
# Database Configuration
# ============================================================================

# PostgreSQL
POSTGRES_HOST=localhost
POSTGRES_DB=digital_workforce
POSTGRES_USER=dwp_user
POSTGRES_PASSWORD=dwp_password_change_me
POSTGRES_PORT=5432

# Redis
REDIS_HOST=localhost
REDIS_PASSWORD=redis_password_change_me
REDIS_PORT=6379

# Milvus
MILVUS_HOST=localhost
MILVUS_PORT=19530
MILVUS_METRICS_PORT=9091
MILVUS_MINIO_USER=minioadmin
MILVUS_MINIO_PASSWORD=minioadmin

# MinIO
MINIO_ROOT_USER=minioadmin
MINIO_ROOT_PASSWORD=minioadmin_change_me
MINIO_ACCESS_KEY=minioadmin
MINIO_SECRET_KEY=minioadmin_change_me
MINIO_ENDPOINT=localhost:9000
MINIO_API_PORT=9000
MINIO_CONSOLE_PORT=9001
MINIO_BROWSER_URL=http://localhost:9001

# ============================================================================
# Application Services
# ============================================================================

# API Gateway
API_PORT=8000

# Task Manager
TASK_MANAGER_PORT=8001

# Agent Runtime
AGENT_RUNTIME_PORT=8002

# Document Processor
DOCUMENT_PROCESSOR_PORT=8003

# FunASR Service (optional standalone ASR container)
FUNASR_SERVICE_PORT=10095
FUNASR_MODEL=iic/SenseVoiceSmall
FUNASR_AUTH_TOKEN=

# ============================================================================
# LLM Provider Configuration
# ============================================================================

# Ollama (Local LLM)
# Use external Ollama server or local instance
OLLAMA_BASE_URL=http://192.168.0.29:11434
# For local Ollama: http://localhost:11434

# OpenAI (Optional - for cloud fallback)
OPENAI_API_KEY=your_openai_api_key_here
OPENAI_MODEL=gpt-4

# Anthropic (Optional - for cloud fallback)
ANTHROPIC_API_KEY=your_anthropic_api_key_here
ANTHROPIC_MODEL=claude-3-opus-20240229

# ============================================================================
# Security Configuration
# ============================================================================

# JWT Authentication
JWT_SECRET=change_me_in_production_use_long_random_string
LLM_ENCRYPTION_KEY=replace_with_32_byte_fernet_key
JWT_ALGORITHM=HS256
JWT_EXPIRATION_HOURS=24

# CORS Origins (comma-separated)
CORS_ORIGINS=http://localhost:3000,http://localhost:5173,http://localhost:8080

# ============================================================================
# Application Settings
# ============================================================================

# Environment
ENVIRONMENT=development  # development, staging, production

# Logging
LOG_LEVEL=INFO  # DEBUG, INFO, WARNING, ERROR, CRITICAL

# Feishu Long Connection Proxy
# system: inherit OS / environment proxy settings
# direct: bypass all proxies
# explicit: use FEISHU_LONG_CONNECTION_PROXY_URL
FEISHU_LONG_CONNECTION_PROXY_MODE=system
# Example explicit proxy:
# FEISHU_LONG_CONNECTION_PROXY_URL=socks5://127.0.0.1:7890

# ============================================================================
# Agent Sandbox Configuration
# ============================================================================

# Sandbox mode: auto, gvisor, firecracker, docker
SANDBOX_MODE=auto

# Resource limits for agent containers
SANDBOX_CPU_LIMIT=0.5
SANDBOX_MEMORY_LIMIT=512M
SANDBOX_TIMEOUT=30

# Optional: dedicated sandbox runtime image with preinstalled document tooling
# Example: linx/sandbox-runtime:py311-office
LINX_SANDBOX_PYTHON_IMAGE=python:3.11-bookworm
LINX_SANDBOX_IO_DEVICE_PATH=

# Sandbox isolation policy
# true: block host subprocess fallback when sandbox/container is unavailable
LINX_ENFORCE_SANDBOX_ISOLATION=true
# emergency compatibility override (not recommended)
LINX_ALLOW_HOST_EXECUTION_FALLBACK=false

# ============================================================================
# Document Processing Configuration
# ============================================================================

# Tesseract OCR languages
TESSERACT_LANG=eng+chi_sim

# Document chunking
CHUNK_SIZE=512
CHUNK_OVERLAP=50

# ============================================================================
# Monitoring and Observability (Optional)
# ============================================================================

# Prometheus
PROMETHEUS_PORT=9090

# Grafana
GRAFANA_PORT=3001
GRAFANA_ADMIN_PASSWORD=admin_change_me

# Jaeger (Distributed Tracing)
JAEGER_PORT=16686
JAEGER_COLLECTOR_PORT=14268

# ============================================================================
# Email Configuration (Optional - for alerts)
# ============================================================================

SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_USER=your_email@gmail.com
SMTP_PASSWORD=your_app_password
SMTP_FROM=noreply@digitalworkforce.local

# ============================================================================
# Resource Quotas (Default values)
# ============================================================================

DEFAULT_MAX_AGENTS_PER_USER=10
DEFAULT_MAX_STORAGE_GB_PER_USER=10
DEFAULT_MAX_CPU_CORES_PER_USER=4
DEFAULT_MAX_MEMORY_GB_PER_USER=8

# ============================================================================
# Feature Flags
# ============================================================================

ENABLE_CLOUD_LLM_FALLBACK=false
ENABLE_DISTRIBUTED_TRACING=false
ENABLE_METRICS_COLLECTION=true
ENABLE_EMAIL_ALERTS=false
ENABLE_WEBSOCKET_UPDATES=true

# ============================================================================
# Development Settings
# ============================================================================

# Hot reload for development
DEV_HOT_RELOAD=true

# Debug mode
DEBUG=false

# API Documentation
ENABLE_API_DOCS=true
API_DOCS_URL=/docs