.env.example

# Knowledge Graph System - Environment Variables Template
# Copy this file to `.env` and fill in your values.
# NEVER commit a real `.env` to source control.

# Environment: "development" (default) or "production"
# In production, the app refuses to start with the default JWT_SECRET.
APP_ENV=development

# --- Database ---
NEO4J_URI=bolt://localhost:7687
NEO4J_USER=neo4j
NEO4J_PASSWORD=change-me
CHROMA_HOST=localhost
CHROMA_PORT=8000

# --- SQLite ---
SQLITE_PATH=./data/sqlite/app.db

# --- LLM / Embedding API Keys ---
# SiliconFlow: https://cloud.siliconflow.cn/account/ak
SILICON_FLOW_API_KEY=
SILICON_FLOW_BASE_URL=https://api.siliconflow.cn/v1

# Kimi (Moonshot): https://platform.moonshot.cn/console/api-keys
KIMI_API_KEY=
KIMI_BASE_URL=https://api.moonshot.cn/v1

# Bailian (Aliyun DashScope): https://dashscope.console.aliyun.com/apiKey
BAILIAN_API_KEY=
BAILIAN_BASE_URL=https://dashscope.aliyuncs.com/compatible-mode/v1
BAILIAN_MODEL=qwen-flash

# --- JWT ---
# Generate with: python -c "import secrets; print(secrets.token_urlsafe(48))"
# MUST be replaced in production (>= 32 random bytes).
JWT_SECRET=replace-me-with-a-strong-random-value
JWT_ALGORITHM=HS256
ACCESS_TOKEN_EXPIRE_MINUTES=60

# --- Upload ---
UPLOAD_DIR=./data/uploads
MAX_FILE_SIZE=10485760

# --- Embedding Model ---
EMBEDDING_MODEL=Qwen/Qwen3-Embedding-8B
EMBEDDING_DIM=1024

# --- CORS ---
# Comma-separated list of allowed origins. NEVER use "*" with credentials.
CORS_ALLOWED_ORIGINS=http://localhost:5173,http://localhost:3000