Files
GovAI/server/.env
T
selfrelease a3245b249a security: 安全审计修复 - API Key清理 + JWT改为HttpOnly Cookie
- API Key: run.md/.env/seed_model_providers.sql 中明文Key替换为占位符
- 认证: JWT从localStorage迁移到HttpOnly Cookie,移除后端body返回token
- 前端: api.ts/knowledge/page.tsx/auth.ts 全面改用Cookie认证
- postcss XSS: package.json添加overrides强制升级到8.5.15
- gitignore: 添加server/.env和.env排除规则
- lint: 移除tenant.go中未使用的roleKey常量
- 文档: 新增docs/security-audit-report.md和hardware-requirements.md
2026-06-26 10:44:04 +08:00

81 lines
2.0 KiB
Bash

# ============================================================
# Aily - 企业 AI 应用平台 环境变量配置
# 复制此文件为 .env 并填入实际值
# ============================================================
# ---- 门户后端 ----
SERVER_HOST=0.0.0.0
SERVER_PORT=8080
DATABASE_URL=postgres://freedak:@localhost:5432/govai_portal?sslmode=disable
REDIS_URL=redis://localhost:6379
JWT_SECRET=change-this-to-a-random-string-in-production
JWT_EXPIRY=24h
# ---- LLM 直连(替代 Dify 对话引擎) ----
LLM_PROVIDER=openai
# OpenAI 兼容接口
OPENAI_API_KEY=sk-local
OPENAI_BASE_URL=http://192.168.1.6:18888/v1
OPENAI_MODEL=qwen2.5-7b-instruct
# Anthropic
ANTHROPIC_API_KEY=
ANTHROPIC_BASE_URL=https://api.anthropic.com
ANTHROPIC_MODEL=claude-sonnet-4-20250514
# 阿里千问 (Qwen)
QWEN_API_KEY=[YOUR_API_KEY]
QWEN_BASE_URL=https://dashscope.aliyuncs.com/compatible-mode/v1
QWEN_MODEL=qwen-plus
# 本地 LLM 服务
LOCAL_LLM_BASE_URL=http://192.168.1.6:18888/v1
LOCAL_LLM_MODEL=qwen2.5-7b-instruct
LOCAL_LLM_API_KEY=
# ---- Dify 对接(知识库/创作中心仍可用) ----
DIFY_API_URL=http://localhost:5001/v1
DIFY_API_KEY=app-xxxx
# ---- 模型网关(未来扩展) ----
MODEL_GATEWAY_URL=http://localhost:8081
# ---- SSO 认证 ----
SSO_TYPE=password
# LDAP
LDAP_URL=ldap://ldap.company.com:389
LDAP_BASE_DN=dc=company,dc=com
LDAP_BIND_DN=cn=admin,dc=company,dc=com
LDAP_BIND_PASSWORD=
# OAuth2
OAUTH2_CLIENT_ID=
OAUTH2_CLIENT_SECRET=
OAUTH2_AUTH_URL=
OAUTH2_TOKEN_URL=
OAUTH2_USERINFO_URL=
# ---- PPT Worker 微服务 ----
PPT_WORKER_URL=http://localhost:8090
# ---- 对象存储 (MinIO) ----
MINIO_ENDPOINT=localhost:9000
MINIO_ACCESS_KEY=minioadmin
MINIO_SECRET_KEY=minioadmin
MINIO_BUCKET=aily-files
# ---- 前端 ----
NEXT_PUBLIC_API_URL=http://localhost:8080
NEXT_PUBLIC_APP_NAME=Aily - 企业AI应用平台
# ---- PostgreSQL (Docker) ----
POSTGRES_USER=aily
POSTGRES_PASSWORD=aily
POSTGRES_DB=aily_portal
# ---- MinIO (Docker) ----
MINIO_ROOT_USER=minioadmin
MINIO_ROOT_PASSWORD=minioadmin