.env.example

# Copy to .env and adjust for your machine.
# docker compose automatically loads .env from the project root.

# --- Runtime mode ---
# Development：跳过 Production 密钥强校验，适合本机 Docker 栈
ASPNETCORE_ENVIRONMENT=Development
# Production 部署时改为 Production，并设置下方 16 位以上唯一密钥
# ASPNETCORE_ENVIRONMENT=Production

# --- Local development security ---
# 这些值只用于本机开发；Production 会拒绝包含 local-development 的密钥。
SAM3_INTERNAL_KEY=maskflow-local-development-sam-key
MASKFLOW_ADMIN_API_KEY=maskflow-local-development-admin-key
SAM3_REQUIRE_INTERNAL_KEY=true

# --- Host ports ---
API_HOST_PORT=8000
WEB_HOST_PORT=3000
SAM_HOST_PORT=8001
MYSQL_HOST_PORT=3307
MINIO_API_PORT=9000
MINIO_CONSOLE_PORT=9001

# 默认只允许本机访问。确需从局域网访问 Web 时，可单独把 WEB_BIND_ADDRESS 改为 0.0.0.0。
API_BIND_ADDRESS=127.0.0.1
WEB_BIND_ADDRESS=127.0.0.1
SAM_BIND_ADDRESS=127.0.0.1
MYSQL_BIND_ADDRESS=127.0.0.1
MINIO_BIND_ADDRESS=127.0.0.1

# Comma-separated frontend origins for CORS
MASKFLOW_CORS_ORIGINS=http://localhost:3000,http://127.0.0.1:3000

# Set to true only for local billing/plan testing (never in production)
MASKFLOW_BILLING_DEV_MODE=true
MASKFLOW_AI_DAILY_LIMIT=10000

# 忘记密码：未接邮件服务时，在接口响应中回显重置码（开发/内网建议 true）
# Development 环境也会自动回显；Production 若需页面内找回请设为 true
MASKFLOW_PASSWORD_RESET_INLINE=true

# --- Database ---
MYSQL_ROOT_PASSWORD=maskflow-local-development-root-password
MYSQL_PASSWORD=maskflow-local-development-user-password

# --- MinIO ---
MINIO_ROOT_USER=admin
MINIO_ROOT_PASSWORD=maskflow-local-development-minio-password
# Windows 示例：D:/docker-volumes/minio/data
# Linux 示例：/data/maskflow/minio
MINIO_DATA_PATH=./data/minio