# =========================================================================
# Enterprise Stack .env.example
# Copy to .env and fill in real values. Placeholders say "replace_me".
# =========================================================================

# ---------- Host ports ----------
WEB_PORT=3010            # LobeChat host port (container listens on 3210)
GATEWAY_PORT=3001        # Enterprise Gateway host port
POSTGRES_PORT=5432       # Postgres host port

# ---------- Postgres ----------
POSTGRES_USER=eg
POSTGRES_PASSWORD=eg_pw
POSTGRES_DB=enterprise_gateway   # DB created automatically by the postgres image
LOBE_DB_NAME=lobechat            # DB created by db-init/01-create-dbs.sql

# ---------- Enterprise Gateway ----------
GATEWAY_NODE_ENV=development
MOCK_MODE=true
AUTH_MODE=dev
LOG_LEVEL=info
GATEWAY_CORS_ORIGINS=http://localhost:3010
ALLOW_DATA_LOSS=false

# Secrets for new workstreams (E: secrets-at-rest, F: metrics, admin CSRF).
# Generate each with:  openssl rand -base64 32
TOKEN_ENCRYPTION_KEY=replace_me_with_openssl_rand_base64_32
ADMIN_CSRF_SECRET=replace_me_with_openssl_rand_base64_32
METRICS_TOKEN=replace_me_with_openssl_rand_base64_32

# Upstream enterprise systems (only used when MOCK_MODE=false)
GONGDAN_API_URL=https://gongdan.example.com
GONGDAN_API_KEY=replace_me
SUPER_OPS_API_URL=https://ops.example.com
SUPER_OPS_API_KEY=replace_me
CLOUDCOST_API_URL=https://cloudcost.example.com
CLOUDCOST_BEARER=replace_me
KB_AGENT_URL=https://kb.example.com
KB_API_KEY=replace_me
AI_SEARCH_URL=https://google.serper.dev
AI_SEARCH_KEY=replace_me
SANDBOX_URL=https://daytona.example.com
SANDBOX_KEY=replace_me
DOC_AGENT_URL=https://doc.example.com
DOC_AGENT_KEY=replace_me

# ---------- LobeChat ----------
APP_URL=http://localhost:3010
# Generate both with:  openssl rand -base64 32
KEY_VAULTS_SECRET=replace_me_with_openssl_rand_base64_32
NEXT_AUTH_SECRET=replace_me_with_openssl_rand_base64_32

# ---------- Casdoor SSO (LobeChat reads these) ----------
# The Casdoor tenant for this environment.
AUTH_CASDOOR_ISSUER=http://casdoor.ashyglacier-8207efd2.eastasia.azurecontainerapps.io
# Create a Casdoor application and paste client id / secret here.
AUTH_CASDOOR_ID=replace_me
AUTH_CASDOOR_SECRET=replace_me
NEXT_AUTH_SSO_PROVIDERS=casdoor

# ---------- Internal wiring ----------
# LobeChat (server) calls the gateway over the compose network.
GATEWAY_INTERNAL_URL=http://gateway:3001

# ---------- Model providers (optional, at least one recommended) ----------
OPENAI_API_KEY=
ANTHROPIC_API_KEY=
GOOGLE_API_KEY=

# ---------- LobeChat feature-flag trim ----------
# CSV of +flag / -flag tokens. See src/config/featureFlags/schema.ts for the list.
# Disables LobeHub market, check-updates, welcome-suggest, cloud promo, changelog,
# and dev agent onboarding; hides the GitHub + docs links in the UI.
FEATURE_FLAGS=-market,-check_updates,-welcome_suggest,-cloud_promotion,-changelog,-agent_onboarding,+commercial_hide_github,+commercial_hide_docs