mirror of
https://gitee.com/pnoker/iot-dc3.git
synced 2026-11-01 02:31:46 +08:00
pnoker
2d565f4a2d
the historical defaults dc3.security.key.2026.io.github.pnoker and
io.github.pnoker.dc3 are public in this repository, so any deployment
that never overrode them shipped a known hmac signing key
- app/scale/swarm compose: fail fast (${var:?}) when dc3_security_key
or auth_hmac_secret is unset; dev compose keeps a clearly-marked
dev-only default
- helm production/default values and k8s secret.env ship empty values:
pre/pro startup rejects blank and known-default hmac keys, forcing
--set-string or an existingsecret; document the per-key failure mode
honestly instead of overpromising startup rejection for both
- dev env files: rotate both keys to machine-generated dev-only values
and add throwaway rs256 material for local oauth flows
- fix the chart maintainer email to a syntactically valid address
102 lines
3.9 KiB
Bash
102 lines
3.9 KiB
Bash
#
|
|
# Copyright 2016-present the IoT DC3 original author or authors.
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as
|
|
# published by the Free Software Foundation, either version 3 of the
|
|
# License, or (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Affero General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
#
|
|
|
|
# Local source-run environment for IDE, EnvFile plugins, or Maven runs.
|
|
# This file mirrors the "Local source-run defaults" section in ../../.env.example.
|
|
# It intentionally excludes Compose-only variables such as DC3_IMAGE_* and DC3_*_PORT.
|
|
|
|
# Postgres
|
|
export POSTGRES_HOST=localhost
|
|
export POSTGRES_PORT=35432
|
|
export POSTGRES_USERNAME=dc3
|
|
export POSTGRES_PASSWORD=dc3dc3dc3
|
|
export POSTGRES_DB=dc3
|
|
export DC3_R2DBC_URL=r2dbc:postgresql://localhost:35432/dc3
|
|
export DC3_SCHEMA_FINGERPRINT=713c2637af52d8e1e16d3d42ae8f85f48bc9e0f35d3f316509799f6a4490e136
|
|
export DC3_SCHEMA_CONTRACT=r2dbc-flag-day-v1
|
|
|
|
# Message broker selection (docs/mq-brokers.md); rabbitmq is the default
|
|
export DC3_MQ_TYPE=rabbitmq
|
|
|
|
|
|
# RabbitMQ
|
|
export RABBITMQ_VIRTUAL_HOST=dc3
|
|
export RABBITMQ_HOST=localhost
|
|
export RABBITMQ_PORT=35672
|
|
export RABBITMQ_USERNAME=dc3
|
|
export RABBITMQ_PASSWORD=dc3dc3dc3
|
|
export RABBITMQ_SSL_ENABLED=false
|
|
export RABBITMQ_SSL_ALGORITHM=TLS
|
|
export RABBITMQ_SSL_VALIDATE_SERVER_CERTIFICATE=false
|
|
export RABBITMQ_SSL_VERIFY_HOSTNAME=false
|
|
|
|
# Mqtt
|
|
export MQTT_BROKER_HOST=localhost
|
|
export MQTT_BROKER_PORT=31883
|
|
export MQTT_USERNAME=dc3
|
|
export MQTT_PASSWORD=dc3dc3dc3
|
|
|
|
# gRPC
|
|
export CENTER_AUTH_HOST=localhost
|
|
export CENTER_MANAGER_HOST=localhost
|
|
export CENTER_DATA_HOST=localhost
|
|
export CENTER_AGENTIC_HOST=localhost
|
|
|
|
# Runtime
|
|
export NODE_ENV=dev
|
|
export DC3_FACADE_GRPC_DEADLINE_MS=3000
|
|
export DC3_SECURITY_KEY=dc3-dev-only-65d8aac255cffeb389f1c9d521ae9a1a # local dev only; generate your own value for real deployments
|
|
export AUTH_HMAC_SECRET=dc3-dev-only-f56ea45d339b35f8e409e55dc4eaf795 # local dev only; generate your own value for real deployments
|
|
export POINT_BATCH_SIZE=500
|
|
export POINT_BATCH_RECEIVE_TIMEOUT_MILLIS=100
|
|
export POINT_CONCURRENT_CONSUMERS=4
|
|
export POINT_MAX_CONCURRENT_CONSUMERS=16
|
|
export POINT_PREFETCH_COUNT=1000
|
|
export POINT_RETRY_MAX_RETRIES=3
|
|
export POINT_RETRY_INITIAL_INTERVAL_MILLIS=1000
|
|
export POINT_RETRY_MULTIPLIER=2
|
|
export POINT_RETRY_MAX_INTERVAL_MILLIS=10000
|
|
export DC3_DRIVER_LEASE_SECONDS=30
|
|
export DC3_DRIVER_LEASE_RENEW_CRON='0/10 * * * * ?'
|
|
export DC3_DRIVER_LEASE_QUEUE_EXPIRES_MILLIS=300000
|
|
export MQTT_BATCH_SPEED=100
|
|
export MQTT_BATCH_INTERVAL=5
|
|
|
|
# Agentic fallback OpenAI-compatible provider. Normal providers are stored in dc3_model_provider.
|
|
export AGENTIC_FALLBACK_OPENAI_BASE_URL=https://api.openai.com
|
|
export AGENTIC_FALLBACK_OPENAI_API_KEY=
|
|
export AGENTIC_FALLBACK_OPENAI_MODEL=gpt-4o
|
|
export AGENTIC_FALLBACK_OPENAI_TEMPERATURE=0.7
|
|
export AGENTIC_FALLBACK_OPENAI_MAX_TOKENS=2048
|
|
export AGENTIC_MEMORY_SCHEMA_INIT=never
|
|
export AGENTIC_MEMORY_ENABLED=false
|
|
export AGENTIC_TOOL_CALLING_ENABLED=true
|
|
export AGENTIC_MEMORY_MAX_MESSAGES=50
|
|
export AGENTIC_ATTACHMENT_STORAGE_PATH=dc3/data/agentic/attachments
|
|
|
|
# Per-process overrides. Uncomment only for a single service process.
|
|
# export TCP_PORT=6270
|
|
# export UDP_PORT=6271
|
|
# export POSTGRES_SCHEMA=dc3_manager
|
|
|
|
# Gateway route overrides. Usually CENTER_*_HOST is enough for local runs.
|
|
# export GATEWAY_ROUTE_AUTH_TOKEN_URI=http://localhost:8300/
|
|
# export GATEWAY_ROUTE_AUTH_URI=http://localhost:8300
|
|
# export GATEWAY_ROUTE_MANAGER_URI=http://localhost:8400
|
|
# export GATEWAY_ROUTE_DATA_URI=http://localhost:8500
|
|
# export GATEWAY_ROUTE_AGENTIC_URI=http://localhost:8600
|