.env.docker.example

# 复制本文件为仓库根目录的 .env.docker（不要命名为 .env，避免与本地开发共用根目录 .env）。
# 启动时使用：docker compose --env-file .env.docker -f docker-compose.yml -f docker-compose.paddle.yml up -d --build
# （--env-file 同时用于 compose 文件内 ${VAR} 插值；勿依赖默认 .env）。
#
# Copy content to .env.docker next to docker-compose.yml. Do not commit real secrets.

# Required: IP or hostname that browsers use to reach this host (no http://).
# Examples: 192.168.1.100 (LAN), or host.docker.internal (single-machine Docker Desktop).
# Do not use 127.0.0.1 here when other computers need to open the site.
HOST_IP=192.168.1.100
HTTP_PORT=80
FRONTEND_BIND_ADDRESS=0.0.0.0

# The API/worker use the non-root account. Root is reserved for bootstrap,
# backup and recovery administration.
MYSQL_USER=smartreview
MYSQL_PASSWORD=changeme-strong-app-mysql
MYSQL_ROOT_PASSWORD=changeme-different-root-mysql
MYSQL_DB=review

JWT_SECRET=generate-a-long-random-string

# Root仅用于初始化、备份与恢复；应用使用仅限下方Bucket的独立账号。
MINIO_ROOT_USER=smartreview-root-admin
MINIO_ROOT_PASSWORD=changeme-different-root-minio
MINIO_APP_ACCESS_KEY=smartreview-storage
MINIO_APP_SECRET_KEY=changeme-strong-app-minio-secret
MINIO_BUCKET=review

# PaddleOCR PP-StructureV3 运行在宿主机 8080 端口时使用此地址。
PADDLEOCR_API_URL=http://host.docker.internal:8080/layout-parsing
PADDLEOCR_API_KEY=
PADDLEOCR_TIMEOUT_SECONDS=600
PADDLE_CONVERT_TIMEOUT_SECONDS=180
# 使用 docker-compose.paddle.yml 时可设置 cpu、gpu:0 等设备。
PADDLEOCR_DEVICE=cpu

# docker-compose.security.yml 使用；该overlay会自动设置扫描必需且失败即拒绝。
CLAMAV_TIMEOUT_SECONDS=60

# Dify Workflow 应用（app-* 密钥）；地址必须能从 backend/worker 容器访问。
DIFY_WORKFLOW_ENABLED=false
DIFY_WORKFLOW_BASE_URL=http://host.docker.internal/v1
DIFY_WORKFLOW_API_KEY=
DIFY_WORKFLOW_USER_PREFIX=smart-review
DIFY_WORKFLOW_TIMEOUT_SECONDS=900

# Must match onlyoffice service JWT in docker-compose.yml
ONLYOFFICE_JWT_SECRET=change-me-onlyoffice-jwt-secret

# Optional first admin (see backend README)
ADMIN_BOOTSTRAP=false
ADMIN_USERNAME=
ADMIN_PASSWORD=
ADMIN_PHONE=13800000000

# Optional immutable image/version overrides. Defaults are pinned in Compose.
SMARTREVIEW_IMAGE_TAG=0.2.0
MYSQL_IMAGE_TAG=8.0.46
MINIO_IMAGE_TAG=RELEASE.2025-09-07T16-13-09Z
ONLYOFFICE_IMAGE_TAG=9.4.0
CLAMAV_IMAGE_TAG=1.4.3

# Production HTTPS overlay only:
# PUBLIC_HOSTNAME=review.example.com
# PUBLIC_BIND_ADDRESS=0.0.0.0