91 lines
3.8 KiB
Bash
91 lines
3.8 KiB
Bash
# 公寓端本地运行环境变量模板（IT-0 / IT-1 / IT-2）
|
||
# 用法：复制为 dev/.env 后填写真实值。
|
||
# .env 已被 .gitignore 忽略，禁止提交；本模板不得写入任何真实口令。
|
||
# 严禁把明文口令写入数据库配置文件、CI 脚本或提交记录。
|
||
# 填好 APT_DB_PASSWORD 后执行：
|
||
# powershell -ExecutionPolicy Bypass -File dev/scripts/apply-it2-sql.ps1
|
||
# 无凭据时可先预览：追加 -DryRun
|
||
|
||
# ---- MySQL（apt_rev01）----
|
||
APT_DB_HOST=127.0.0.1
|
||
APT_DB_PORT=3306
|
||
APT_DB_NAME=apt_rev01
|
||
APT_DB_USER=iotlocks
|
||
APT_DB_PASSWORD=<required: database account password>
|
||
|
||
# ---- Redis ----
|
||
APT_REDIS_HOST=127.0.0.1
|
||
APT_REDIS_PORT=6379
|
||
APT_REDIS_DB=1
|
||
APT_REDIS_PASSWORD=
|
||
APT_REDIS_KEY_PREFIX=apt:rev01:
|
||
|
||
# ---- JWT ----
|
||
# TokenService.signWith(HS512, secret) requires a Base64-encoded key whose decoded
|
||
# length is at least 64 bytes. Plain text / hex / placeholder text causes
|
||
# ArrayIndexOutOfBoundsException on login.
|
||
# PowerShell generation example:
|
||
# $b = New-Object byte[] 64
|
||
# (New-Object System.Security.Cryptography.RNGCryptoServiceProvider).GetBytes($b)
|
||
# [Convert]::ToBase64String($b)
|
||
APT_TOKEN_SECRET=<required: Base64 HS512 key, decoded length >= 64 bytes>
|
||
|
||
# ---- Apartment identity (D5: one process, one gyid) ----
|
||
APT_GY_ID=APT-REV01-001
|
||
|
||
# ---- Runtime ----
|
||
APT_HTTP_PORT=8080
|
||
APT_UPLOAD_PATH=./uploadPath
|
||
APT_PROBE_ENABLED=true
|
||
APT_PROBE_TIMEOUT_MS=2000
|
||
# Table 9-16: Mock master downlink is only allowed with Spring profile 'local'.
|
||
# Keep false in production; a non-local profile with true fails startup.
|
||
APT_MASTER_CLIENT_MOCK=false
|
||
|
||
# ---- SIP voice / AMI (disabled by default) ----
|
||
# Master switch; AMI host/port/user/timeouts live in table apt_ast_instance.
|
||
# Keep false until a reachable Asterisk exists — false means "no connection, no SIP call",
|
||
# and the scan task only handles the tablet chain.
|
||
APT_VOICE_ENABLED=false
|
||
# Auto-dial when jcsj is due; false = only manual POST /apt/jcxx/{jcid}/dial
|
||
APT_VOICE_SIP_CALL_ENABLED=true
|
||
# Duty desk extensions (second leg), comma separated, e.g. 1002,1003; empty = room leg only
|
||
APT_VOICE_DUTY_EXTENSIONS=
|
||
APT_VOICE_TTS_CONTEXT=apt-tts
|
||
APT_VOICE_TTS_EXTENSION=s
|
||
APT_VOICE_TTS_MEDIA_PREFIX=apt/call-prompt
|
||
APT_VOICE_DIAL_TIMEOUT_MS=30000
|
||
|
||
# ---- AMI secret (process env only) ----
|
||
# apt_ast_instance.ami_secret_ref stores the VARIABLE NAME only (default APT_AMI_SECRET).
|
||
# The value must match manager.conf accounts; it is never written to DB, logs or git.
|
||
# Missing value -> AmiException(AMI_CONFIG_MISSING), instance stays DOWN, startup is unaffected.
|
||
APT_AMI_SECRET=<required: AMI secret, injected by process env only>
|
||
|
||
# ---- Device auth for /open/v1/** ----
|
||
# Production must keep true; local debugging may set false (only X-Device-Code is checked).
|
||
APT_DEVICE_HMAC_ENABLED=true
|
||
APT_DEVICE_HMAC_SECRET=<required: shared HMAC secret, injected by process env only>
|
||
|
||
# ---- Local debug endpoints (/apt/local/**, must stay false in production) ----
|
||
# true exposes: inject #7 match verdict, inject AMI events (bypasses real entry points).
|
||
APT_DEBUG_ENABLED=false
|
||
|
||
# ---- Tablet face photo storage (paths only in DB, image on disk/OSS) ----
|
||
# Writable directory; DB stores relative path face/{gyid}/{yyyy}/{MM}/{dd}/{jcid}/{photoId}.jpg
|
||
APT_PHOTO_ROOT=./data/apt-photos
|
||
# Per-file limit in bytes (must be <= spring.servlet.multipart.max-file-size, currently 10MB)
|
||
APT_PHOTO_MAX_BYTES=5242880
|
||
# Prefix used only when echoing a URL back to the tablet
|
||
APT_PHOTO_PUBLIC_PREFIX=/apt/files
|
||
APT_PHOTO_STORAGE_TARGET=LOCAL
|
||
# Retention: photo records and files older than N days are purged daily at 03:30
|
||
# (business cap = 1 month; keep default 30 unless ops asks otherwise)
|
||
APT_PHOTO_RETENTION_DAYS=30
|
||
APT_PHOTO_PURGE_BATCH=200
|
||
|
||
# ---- Druid console (disabled by default) ----
|
||
APT_DRUID_CONSOLE=false
|
||
APT_DRUID_USER=aptadmin
|
||
APT_DRUID_PASSWORD=
|