Memorica/.env.example at main · sevoniva/Memorica · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
# ============================================
# Memorica Environment Variables
# Copy to .env and fill in production values
# ============================================

# --- Database ---
DB_URL=jdbc:postgresql://postgres:5432/memorica
DB_USERNAME=memorica
DB_PASSWORD=change-me-db-password
DB_POOL_MAX=20
DB_POOL_MIN_IDLE=5
DB_POOL_TIMEOUT=20000
DB_POOL_IDLE_TIMEOUT=300000
DB_POOL_MAX_LIFETIME=1200000

# --- JWT ---
# Generate with: openssl rand -base64 64
JWT_SECRET=change-me-to-a-random-64-char-string
JWT_ACCESS_EXPIRATION=900000
JWT_REFRESH_EXPIRATION=604800000

# --- MinIO / S3 ---
MINIO_ENDPOINT=http://minio:9000
MINIO_ACCESS_KEY=minioadmin
MINIO_SECRET_KEY=minioadmin
MINIO_BUCKET=memorica
MINIO_IMAGE_TAG=RELEASE.YYYY-MM-DDTHH-MM-SSZ

# --- File Upload ---
FILE_MAX_SIZE=10485760
FILE_ALLOWED_TYPES=image/jpeg,image/png,image/gif,image/webp,application/pdf
FILE_URL_EXPIRY_MINUTES=15

# --- CORS ---
CORS_ALLOWED_ORIGINS=http://localhost:5173,http://localhost:3000

# --- Hocuspocus ---
HOCUSPOCUS_PORT=1234
HOCUSPOCUS_WEBHOOK_SECRET=change-me-webhook-secret
HOCUSPOCUS_DATABASE_URL=postgresql://memorica:change-me-db-password@postgres:5432/memorica

# --- Redis ---
REDIS_URL=redis://redis:6379
REDIS_PASSWORD=change-me-redis-password

# --- Files ---
FILE_ORPHAN_RETENTION_DAYS=7

# --- AI Providers ---
AI_PROVIDER=deepseek
AI_MAX_INPUT_CHARS=8000
DEEPSEEK_API_KEY=
DEEPSEEK_BASE_URL=https://api.deepseek.com
DEEPSEEK_MODEL=deepseek-v4-flash
DEEPSEEK_THINKING=disabled
DEEPSEEK_TIMEOUT=45s
DEEPSEEK_TEMPERATURE=0.4

# --- TLS / Production Compose ---
DOMAIN_NAME=memorica.example.com
POSTGRES_IMAGE_TAG=16-alpine
REDIS_IMAGE_TAG=7-alpine
NGINX_IMAGE_TAG=1.27-alpine
DRAWIO_IMAGE_TAG=latest
DRAWIO_PORT=8081
TLS_CERT_PATH=/etc/letsencrypt/live/memorica.example.com/fullchain.pem
TLS_KEY_PATH=/etc/letsencrypt/live/memorica.example.com/privkey.pem

# --- Frontend ---
# Leave API/WS empty for same-origin production deployments.
# For production, self-host diagrams.net and point VITE_DRAWIO_URL to that origin when possible.
VITE_API_BASE_URL=
VITE_WS_URL=
VITE_DRAWIO_URL=https://embed.diagrams.net/