ForcePilot/.env.template
Kris 9294413d57 chore: add sensitive field encryption key support
Add ENCRYPTION_KEY env config and document its usage, also pass it to docker compose environment variables
2026-06-20 22:21:54 +08:00

75 lines
2.7 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# region model_provider
SILICONFLOW_API_KEY= # 推荐使用硅基流动免费服务 https://cloud.siliconflow.cn/i/Eo5yTHGJ
TAVILY_API_KEY= # 获取搜索服务的 api key 请访问 https://app.tavily.com/
# JWT 安全配置:首次部署请生成随机值,初始化脚本会在留空时自动生成
YUXI_ENV=development
JWT_SECRET_KEY=
YUXI_INSTANCE_ID=
# 敏感字段加密密钥:用于加密配置中的 password/token/api_key 等敏感字段
# 生产环境必须设置;留空时敏感字段将以明文存储(仅开发环境兼容)
# 生成方式python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
ENCRYPTION_KEY=
# # 其余可选配置
# OPENAI_API_KEY=
# OPENAI_API_BASE=
# ZHIPUAI_API_KEY=
# DASHSCOPE_API_KEY=
# DEEPSEEK_API_KEY=
# ARK_API_KEY=
# MINIMAX_API_KEY= # MiniMax 大模型 https://platform.minimaxi.com/
# TOGETHER_API_KEY=
# # endregion model_provider
# # region neo4j
# NEO4J_URI=
# NEO4J_USERNAME=
# NEO4J_PASSWORD=
# # endregion neo4j
# # Servies
# YUXI_SUPER_ADMIN_NAME=
# YUXI_SUPER_ADMIN_PASSWORD=
# # URL Whitelist (comma-separated domains/IPs, empty to disable URL parsing)
# YUXI_URL_WHITELIST=github.com,docs.example.com,gitlab.example.com,127.0.0.1
# # MinerU
# MINERU_API_KEY=
# Sandbox (deerFlow-style provisioner)
# SANDBOX_PROVIDER=provisioner
# SANDBOX_PROVISIONER_URL=http://sandbox-provisioner:8002
# SANDBOX_VIRTUAL_PATH_PREFIX=/home/gem/user-data
# SANDBOX_EXEC_TIMEOUT_SECONDS=180
# SANDBOX_MAX_OUTPUT_BYTES=262144
# SANDBOX_KEEPALIVE_INTERVAL_SECONDS=30
# SANDBOX_IDLE_TIMEOUT_SECONDS=120
# SANDBOX_IDLE_CHECK_INTERVAL_SECONDS=10
# # sandbox-provisioner backend: memory | docker | kubernetes
# SANDBOX_PROVISIONER_BACKEND=docker
# sandbox-provisioner 通用配置
# SANDBOX_IMAGE=enterprise-public-cn-beijing.cr.volces.com/vefaas-public/all-in-one-sandbox:latest
# SANDBOX_CONTAINER_PORT=8080
# SANDBOX_HEALTH_TIMEOUT_SECONDS=300
# MEMORY_SANDBOX_URL_TEMPLATE=http://agent-sandbox:8000
# SANDBOX_HTTP_PROXY=http://host.docker.internal:7897
# SANDBOX_HTTPS_PROXY=http://host.docker.internal:7897
# Docker backend 专用 (used when SANDBOX_PROVISIONER_BACKEND=docker)
# 注意:网络名称已在 docker-compose.yml 中固定为 yuxi-know_app-network
# SANDBOX_DOCKER_NETWORK=yuxi-know_app-network
# SANDBOX_DOCKER_THREADS_HOST_PATH=
# SANDBOX_DOCKER_SANDBOX_PREFIX=yuxi-sandbox
# SANDBOX_DOCKER_SANDBOX_HOST=host.docker.internal
# Kubernetes backend 专用 (used when SANDBOX_PROVISIONER_BACKEND=kubernetes)
# SANDBOX_K8S_NAMESPACE=yuxi-know
# SANDBOX_NODE_HOST=host.docker.internal
# KUBECONFIG_PATH=/root/.kube/config
# THREAD_PVC=yuxi-thread
# SKILLS_PVC=yuxi-skills # 当前代码会读取,但 Pod 挂载实际仍只使用 THREAD_PVC