MinKy/.env.example at main · hephaex/MinKy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
# =============================================================================
# MinKy Production Environment Configuration
# =============================================================================
# CRITICAL: Copy this file to .env and update ALL values before deployment
# Generate secrets with: python -c "import secrets; print(secrets.token_urlsafe(32))"
# =============================================================================

# -----------------------------------------------------------------------------
# Database Configuration
# -----------------------------------------------------------------------------
# PostgreSQL credentials - CHANGE THESE IN PRODUCTION
POSTGRES_USER=minky_user
POSTGRES_PASSWORD=CHANGE_ME_use_strong_password
POSTGRES_DB=minky_db

# Database URLs (constructed from above credentials)
# For Python app:
DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB}
# For Rust backend (uses separate database):
DATABASE_URL_RUST=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:5432/minky_rust_db

# Database Connection Pool Settings (Rust backend)
DATABASE_MAX_CONNECTIONS=20
DATABASE_MIN_CONNECTIONS=2
DATABASE_ACQUIRE_TIMEOUT_SECS=30
DATABASE_MAX_LIFETIME_SECS=1800
DATABASE_IDLE_TIMEOUT_SECS=600

# -----------------------------------------------------------------------------
# Security Secrets
# -----------------------------------------------------------------------------
# Flask secret key - Generate with: python -c "import secrets; print(secrets.token_urlsafe(64))"
SECRET_KEY=CHANGE_ME_generate_secure_random_key_at_least_64_chars

# JWT secrets - Generate unique keys for each
JWT_SECRET_KEY=CHANGE_ME_generate_jwt_secret_key
JWT_SECRET=CHANGE_ME_minimum_32_characters_required

# API Key encryption - Generate with: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
AI_CONFIG_ENCRYPTION_KEY=CHANGE_ME_fernet_key

# -----------------------------------------------------------------------------
# Flask Application
# -----------------------------------------------------------------------------
FLASK_ENV=production
FLASK_DEBUG=False

# -----------------------------------------------------------------------------
# CORS Configuration
# -----------------------------------------------------------------------------
CORS_ORIGINS=https://your-domain.com

# -----------------------------------------------------------------------------
# Redis Configuration
# -----------------------------------------------------------------------------
REDIS_URL=redis://redis:6379/0
CACHE_TYPE=RedisCache
CACHE_DEFAULT_TIMEOUT=300

# Redis server settings (used by docker-compose)
REDIS_MAXMEMORY=256mb
REDIS_MAXMEMORY_POLICY=allkeys-lru

# -----------------------------------------------------------------------------
# Rate Limiting
# -----------------------------------------------------------------------------
RATE_LIMIT_DEFAULT=1000 per hour

# -----------------------------------------------------------------------------
# OpenSearch Configuration
# -----------------------------------------------------------------------------
OPENSEARCH_URL=https://opensearch:9200
OPENSEARCH_USERNAME=admin
OPENSEARCH_PASSWORD=CHANGE_ME_opensearch_admin_password
OPENSEARCH_INITIAL_ADMIN_PASSWORD=CHANGE_ME_opensearch_admin_password
OPENSEARCH_USE_SSL=true
OPENSEARCH_JAVA_OPTS=-Xms2048m -Xmx2048m

# -----------------------------------------------------------------------------
# AI Service API Keys (Optional - set the ones you use)
# -----------------------------------------------------------------------------
OPENAI_API_KEY=
ANTHROPIC_API_KEY=
GOOGLE_API_KEY=
GOOGLE_CLOUD_API_KEY=

# -----------------------------------------------------------------------------
# Local LLM Configuration (Optional)
# -----------------------------------------------------------------------------
LOCAL_LLM_ENABLED=false
LOCAL_LLM_URL=http://localhost:8080
LOCAL_LLM_MODEL=llama2
LOCAL_LLM_API_KEY=

# -----------------------------------------------------------------------------
# Default AI Configuration
# -----------------------------------------------------------------------------
DEFAULT_LLM_PROVIDER=google
DEFAULT_LLM_MODEL=gemini-1.5-flash
DEFAULT_OCR_SERVICE=google-vision
DEFAULT_AI_TAGS_ENABLED=true
DEFAULT_AI_SUMMARY_ENABLED=true

# -----------------------------------------------------------------------------
# Git Integration Configuration (Optional)
# -----------------------------------------------------------------------------
GIT_ENABLED=true
GIT_REPOSITORY_URL=
GIT_BRANCH=main
GIT_USERNAME=
GIT_TOKEN=
GIT_AUTO_COMMIT=false
GIT_COMMIT_MESSAGE_PREFIX=[minky]

# -----------------------------------------------------------------------------
# Document Export Configuration
# -----------------------------------------------------------------------------
EXPORT_ENABLED=true
DEFAULT_EXPORT_FORMAT=markdown
DEFAULT_EXPORT_BUNDLE=false
DEFAULT_EXPORT_SHORT_FILENAME=false
EXPORT_INCLUDE_METADATA=true
EXPORT_INCLUDE_TAGS=true

# -----------------------------------------------------------------------------
# Rust Backend Configuration
# -----------------------------------------------------------------------------
RUST_HOST=0.0.0.0
RUST_PORT=8000
RUST_LOG=minky=info,tower_http=info

# -----------------------------------------------------------------------------
# Frontend Configuration
# -----------------------------------------------------------------------------
REACT_APP_API_URL=http://localhost:8000