mjalmoudy94
0b28a9f365
نام نمایشی و هویت اپلیکیشن در همهٔ سطوح کاربر-پسند از «AGY Web» به «Smart Organization» تغییر کرد: - UI: عنوان تب مرورگر، صفحهٔ ورود، برند و لوگوی پوستهٔ اپ (AG → SO) - بک‌اند: مقدار پیش‌فرض app_name، نام و توضیح توزیع پایتون - مانیفست‌ها: package.json ریشه و چهار پکیج، pyproject.toml - مستندات: README، PLAN، TODO و دو سند docs شناسه‌های داخلی عمداً دست‌نخورده مانده‌اند: scope پکیج‌های @agy/*، کلیدهای localStorage، نام‌های logger، نام فایل پایگاهٔ داده، و اطلاعات اتصال پایگاه داده در .env.example و infra/docker/docker-compose.yml.
78 lines
3.0 KiB
Bash
78 lines
3.0 KiB
Bash
# ---------------------------------------------------------------------------
|
|
# Smart Organization — sample environment file.
|
|
# Copy to `.env` and fill in real values. NEVER commit a real `.env`.
|
|
# Every external provider defaults to `mock` so the stack runs with zero
|
|
# credentials. Flip the *_PROVIDER vars once real credentials exist.
|
|
# ---------------------------------------------------------------------------
|
|
|
|
APP_ENV=development
|
|
APP_URL=http://localhost:3000
|
|
API_URL=http://localhost:8000
|
|
|
|
# Origins the browser is allowed to call the API from, comma-separated.
|
|
# `localhost` and `127.0.0.1` are DIFFERENT origins to a browser: if you start
|
|
# the dev server with `-H 127.0.0.1` and this list only has `localhost`, every
|
|
# request fails with an opaque "Disallowed CORS origin". Both are listed here.
|
|
# Production must set this explicitly — the dev default is rejected at boot.
|
|
CORS_ORIGINS=http://localhost:3000,http://127.0.0.1:3000
|
|
|
|
# --- Data stores -----------------------------------------------------------
|
|
DATABASE_URL=postgresql+psycopg://agy:agy@localhost:5432/agy_web
|
|
REDIS_URL=redis://localhost:6379/0
|
|
|
|
# --- Security --------------------------------------------------------------
|
|
# Generate with: python -c "import secrets; print(secrets.token_urlsafe(48))"
|
|
JWT_SECRET=change-me
|
|
# Must be exactly 32 bytes, base64/hex encoded.
|
|
ENCRYPTION_KEY=change-me-32-bytes
|
|
|
|
# --- AI models (hidden from customers) -------------------------------------
|
|
# mock | openai_compatible
|
|
AI_DEFAULT_PROVIDER=mock
|
|
OPENAI_COMPATIBLE_BASE_URL=
|
|
OPENAI_COMPATIBLE_API_KEY=
|
|
|
|
# --- Git provider ----------------------------------------------------------
|
|
# mock | gitea
|
|
GIT_PROVIDER=mock
|
|
GITEA_URL=
|
|
GITEA_INTERNAL_URL=
|
|
GITEA_ADMIN_TOKEN=
|
|
|
|
# --- Preview domain routing ------------------------------------------------
|
|
# mock | caddy
|
|
DOMAIN_ROUTER=mock
|
|
PREVIEW_ROOT_DOMAIN=msa.artacloud.ir
|
|
PREVIEW_PORT_START=8080
|
|
PREVIEW_PORT_END=8999
|
|
CADDYFILE_PATH=/etc/caddy/Caddyfile
|
|
|
|
# --- Sandbox ---------------------------------------------------------------
|
|
# mock | daytona | e2b
|
|
SANDBOX_PROVIDER=mock
|
|
DAYTONA_API_KEY=
|
|
DAYTONA_API_URL=
|
|
E2B_API_KEY=
|
|
|
|
# --- Payments --------------------------------------------------------------
|
|
# mock | stripe
|
|
PAYMENT_PROVIDER=mock
|
|
STRIPE_SECRET_KEY=
|
|
STRIPE_WEBHOOK_SECRET=
|
|
|
|
# --- Error logging ---------------------------------------------------------
|
|
# Every failure the platform catches is written to the `error_events` table and
|
|
# is readable at /admin/errors (platform owner only). Errors are redacted before
|
|
# they are stored — passwords, tokens, API keys, JWTs and DSN credentials are
|
|
# stripped by app/core/redact.py.
|
|
#
|
|
# ERROR_LOG_ENABLED=0 turns persistence off entirely; failures still reach
|
|
# stderr, but nothing is written to the database.
|
|
ERROR_LOG_ENABLED=1
|
|
|
|
# Whether 4xx responses are recorded too. Off by default: a public API receives
|
|
# a constant stream of 404s from scanners, and recording them all buries the
|
|
# genuine bugs. Turn it on while debugging a misbehaving client.
|
|
# 5xx responses are always recorded, whatever this is set to.
|
|
ERROR_LOG_CLIENT_ERRORS=0
|