127 lines
4.0 KiB
Plaintext
127 lines
4.0 KiB
Plaintext
# Database
|
||
APP_ENVIRONMENT=development
|
||
SECURITY_STRICT_MODE=false
|
||
CORS_ALLOWED_ORIGINS=http://localhost:8102,http://127.0.0.1:8102
|
||
TRUSTED_HOSTS=*
|
||
SECURITY_HEADERS_ENABLED=true
|
||
|
||
POSTGRES_USER=admin
|
||
POSTGRES_PASSWORD=password
|
||
POSTGRES_DB=kg_admin
|
||
DATABASE_URL=postgresql://admin:password@postgres:5432/kg_admin
|
||
DB_SCHEMA=kg_admin_new2
|
||
DB_MIGRATIONS_ENABLED=false
|
||
|
||
# Data Center MySQL (independent from graph/system PostgreSQL)
|
||
MYSQL_ROOT_PASSWORD=change-this-root-password
|
||
MYSQL_DATABASE=platform_control
|
||
MYSQL_USER=data_center
|
||
MYSQL_PASSWORD=change-this-data-password
|
||
MYSQL_ACCESS_BROKER_USER=access_broker
|
||
MYSQL_ACCESS_BROKER_PASSWORD=change-this-access-broker-credential
|
||
DATA_MYSQL_URL=mysql://data_center:change-this-data-password@mysql:3306/platform_control
|
||
DATA_MYSQL_REQUIRED=true
|
||
DATA_MYSQL_POOL_MIN_SIZE=2
|
||
DATA_MYSQL_POOL_MAX_SIZE=20
|
||
DATA_SQL_CONSOLE_WRITE_ENABLED=false
|
||
INTERFACE_API_SECRET=change-me-interface-api-secret
|
||
DATA_MYSQL_DIRECT_ACCESS_ENABLED=true
|
||
# Legacy fallback used by older deployments. Prefer DATA_MYSQL_SSH_HOST.
|
||
DATA_MYSQL_PUBLIC_HOST=
|
||
DATA_MYSQL_PUBLIC_PORT=0
|
||
DATA_MYSQL_DIRECT_TRANSPORT=SSH 隧道（强制）
|
||
DATA_MYSQL_SSH_TUNNEL_REQUIRED=true
|
||
DATA_MYSQL_SSH_HOST=
|
||
DATA_MYSQL_SSH_PORT=2222
|
||
DATA_MYSQL_SSH_BIND=127.0.0.1
|
||
DATA_MYSQL_SSH_USERNAME=dbeaver
|
||
DATA_MYSQL_SSH_AUTH_METHOD=SSH 私钥 / SSH Agent
|
||
DATA_MYSQL_MANAGED_ACCESS_ENABLED=true
|
||
DATA_MYSQL_SSH_AUTHORIZED_KEYS_FILE=/var/lib/travel-kg/dbeaver-access/authorized_keys
|
||
DATA_MYSQL_SSH_HOST_PUBLIC_KEY_FILE=/var/lib/travel-kg/dbeaver-access/ssh_host_ed25519_key.pub
|
||
DATA_MYSQL_PROVISIONER_USER=access_broker
|
||
DATA_MYSQL_PROVISIONER_PASSWORD=change-this-access-broker-credential
|
||
DATA_MYSQL_ADMIN_HOST=127.0.0.1
|
||
DATA_MYSQL_ADMIN_PORT=3307
|
||
DATA_MYSQL_ADMIN_ACCOUNT_POLICY=一人一号 · 单库授权 · 禁止 root
|
||
DATA_MYSQL_AUDIT_ENABLED=false
|
||
# 开发环境继续使用 Docker named volume。生产服务器覆盖文件强制改为独立块存储：
|
||
DATA_MYSQL_STORAGE_BACKEND=docker-volume
|
||
# 生产示例：/mnt/sdr、prod-mysql-storage-01、/mnt/sdr/nianxx/mysql
|
||
MYSQL_STORAGE_MOUNT=
|
||
MYSQL_STORAGE_ID=
|
||
MYSQL_DATA_DIR=
|
||
# mysql:8.4 官方镜像默认用户；更换镜像时先核对 UID/GID。
|
||
MYSQL_CONTAINER_UID=999
|
||
MYSQL_CONTAINER_GID=999
|
||
DATA_BACKUP_ENABLED=false
|
||
DATA_BACKUP_ENCRYPTION_REQUIRED=true
|
||
DATA_BACKUP_RETENTION_DAYS=30
|
||
# 生产必须是代码仓库和 MySQL 运行目录之外的现有目录。
|
||
DATA_BACKUP_ROOT=
|
||
# 必须位于代码仓库之外，文件权限设为 600，内容至少 32 个随机字符。
|
||
DATA_BACKUP_PASSPHRASE_FILE=/etc/travel-kg/secrets/mysql-backup-passphrase
|
||
|
||
# FalkorDB
|
||
FALKORDB_HOST=falkordb
|
||
FALKORDB_INTERNAL_PORT=6379
|
||
FALKORDB_PORT=6380
|
||
FALKORDB_GRAPH=guiyang_new2
|
||
FALKORDB_PASSWORD=
|
||
|
||
# Auth
|
||
AUTH_SECRET=change-me-32-chars-minimum-secret
|
||
AUTH_ALGORITHM=HS256
|
||
AUTH_ISSUER=zn-kg-admin
|
||
AUTH_AUDIENCE=zn-kg-admin-web
|
||
AUTH_TOKEN_EXPIRE_MINUTES=60
|
||
AUTH_DEFAULT_USERNAME=admin@example.com
|
||
AUTH_DEFAULT_PASSWORD=change-me
|
||
AUTH_LOGIN_MAX_ATTEMPTS=5
|
||
AUTH_LOGIN_WINDOW_SECONDS=300
|
||
AUTH_LOGIN_LOCK_SECONDS=900
|
||
INTERFACE_API_DEFAULT_EXPIRY_DAYS=30
|
||
INTERFACE_API_MAX_EXPIRY_DAYS=90
|
||
INTERFACE_API_RATE_LIMIT_PER_MINUTE=120
|
||
|
||
# LLM, optional
|
||
LLM_PROVIDER=openai-compatible
|
||
LLM_API_BASE=
|
||
LLM_API_KEY=
|
||
LLM_MODEL=deepseek-chat
|
||
LLM_TIMEOUT_SECONDS=30
|
||
LLM_EXTRACTION_ENABLED=false
|
||
|
||
# App
|
||
DEFAULT_TENANT=CityGraph-new2
|
||
DEFAULT_PROJECT=CityGraph-new2
|
||
INGEST_API_KEYS=dev-key-1
|
||
|
||
# External services, optional
|
||
AMAP_WEB_KEY=
|
||
AMAP_JS_KEY=
|
||
AMAP_SECURITY_JSCODE=
|
||
|
||
# 阿里云 OCR (RecognizePassport 等), optional
|
||
ALIYUN_OCR_ACCESS_KEY_ID=
|
||
ALIYUN_OCR_ACCESS_KEY_SECRET=
|
||
ALIYUN_OCR_ENDPOINT=ocr-api.cn-hangzhou.aliyuncs.com
|
||
GAODE_CRAWLER_PATH=
|
||
TRAVEL_KG_DATA_ROOT=./data
|
||
TRAVEL_AGENCY_SOURCE_ROOT=./data/source/travel_agency
|
||
TRAVEL_DELIVERY_ROOT=./data/source/travel_delivery_20260602
|
||
TRAVEL_KG_EXPORT_ROOT=./data/exports
|
||
TRAVEL_KG_ENV_PATH=./.env
|
||
|
||
# Docker host ports
|
||
API_HOST_BIND=0.0.0.0
|
||
API_PORT=8102
|
||
POSTGRES_HOST_BIND=127.0.0.1
|
||
POSTGRES_PORT=5433
|
||
MYSQL_HOST_BIND=127.0.0.1
|
||
MYSQL_PORT=3307
|
||
FALKORDB_HOST_BIND=127.0.0.1
|
||
FALKORDB_PORT=6380
|
||
FALKORDB_BROWSER_HOST_BIND=127.0.0.1
|
||
FALKORDB_BROWSER_PORT=3002
|