forked from EduCraft/curriculum-project-hub
白
e878b46701
# Conflicts: # .gitignore # hub/.env.example # hub/deploy/deploy_fleet_release.sh # hub/deploy/deploy_platform.sh # hub/test/integration/helpers.ts
108 lines
5.2 KiB
Bash
108 lines
5.2 KiB
Bash
# Hub runtime configuration. Copy to .env and fill in.
|
||
|
||
# Production preflight requires the explicit production runtime mode.
|
||
NODE_ENV="production"
|
||
|
||
# PostgreSQL connection string.
|
||
DATABASE_URL="postgresql://paradigm:paradigm@127.0.0.1:5432/paradigm"
|
||
|
||
# Provider URL and credentials are write-only Organization Provider Connection
|
||
# data in PostgreSQL, encrypted by ADR-0024. Process-global ANTHROPIC_* provider
|
||
# settings are rejected in production and must not be added here.
|
||
|
||
# Model override (optional). Defaults to anthropic/claude-sonnet-5.
|
||
# Use an OpenRouter model slug, for example:
|
||
# ANTHROPIC_DEFAULT_SONNET_MODEL="~anthropic/claude-sonnet-latest"
|
||
# To use GLM:
|
||
# ANTHROPIC_DEFAULT_SONNET_MODEL="z-ai/glm-4.7"
|
||
# ANTHROPIC_DEFAULT_OPUS_MODEL="z-ai/glm-4.7"
|
||
# ANTHROPIC_DEFAULT_HAIKU_MODEL="z-ai/glm-4.6"
|
||
|
||
# Alpha Silo safety limits. max turns may use its default; every other value is
|
||
# mandatory in production and should be calibrated on the target host.
|
||
HUB_AGENT_MAX_TURNS="150"
|
||
HUB_AGENT_MAX_CONCURRENT_RUNS="1"
|
||
HUB_AGENT_MAX_RUN_SECONDS="1800"
|
||
# 文件库上传把内容放在 JSON body 里,所以 body limit 与
|
||
# HUB_FILELIB_MAX_FILE_BYTES 串联(见下方注释),不能降回 1 MiB。
|
||
HUB_HTTP_BODY_LIMIT_BYTES="73400320"
|
||
HUB_MAX_FILES_PER_MESSAGE="20"
|
||
HUB_MAX_FILE_BYTES="26214400"
|
||
# Max concurrent Alibaba Docmind jobs for one convert_pdf_to_md batch (1-8).
|
||
HUB_PDF_TO_MD_MAX_CONCURRENT="3"
|
||
HUB_HTTP_REQUESTS_PER_MINUTE="120"
|
||
HUB_FEISHU_EVENTS_PER_MINUTE="120"
|
||
|
||
# 文件库单文件上限(缺省 10 MiB)。这两个值是串联的:上传把文件内容放在
|
||
# JSON body 里,二进制过 base64 体积涨 4/3。所以有效上限是
|
||
# min(本值, HUB_HTTP_BODY_LIMIT_BYTES × 3/4);body limit 太小时本值不可达,
|
||
# 且报错是 Fastify 的 413 Payload Too Large 而不是 file_too_large。
|
||
HUB_FILELIB_MAX_FILE_BYTES="52428800"
|
||
|
||
# Persistent system-managed root for project workspaces. Production must use an
|
||
# absolute path outside the deployment/release tree; install_service.sh defaults
|
||
# to this path and rejects any overlap before installing the unit.
|
||
HUB_PROJECT_WORKSPACE_ROOT="/var/lib/cph-hub/workspaces"
|
||
|
||
# Persistent root for the content-addressed agent skill store. Required at hub
|
||
# startup unless XDG_STATE_HOME is set (then defaults to $XDG_STATE_HOME/skills).
|
||
HUB_SKILL_STORE_ROOT="/var/lib/cph-hub/state/skills"
|
||
|
||
# Optional tenant-local Typst package roots. When configured, the agent
|
||
# sandbox forwards these exact paths to Typst. The preinstalled package path is
|
||
# read-only; the cache path is the only additional write location.
|
||
# Keep the preinstalled package path outside the release tree and provision it
|
||
# with the namespace layout expected by Typst, for example:
|
||
# <root>/paradigm/paradigm-templates/0.2.20/
|
||
# Use a separate service-writable cache path when runtime dependencies may be
|
||
# downloaded; do not make the immutable preinstalled directory the cache.
|
||
# TYPST_PACKAGE_PATH="/srv/curriculum-project-hub/typst-packages/org-a"
|
||
# TYPST_PACKAGE_CACHE_PATH="/var/cache/cph-hub/org-a/typst"
|
||
|
||
# This process is pinned to exactly one Organization. Feishu credentials are
|
||
# resolved from that Organization's encrypted ACTIVE connection.
|
||
HUB_SILO_ORGANIZATION_ID=""
|
||
# Absolute path to the bot-only lark-cli binary used by Agent Feishu tools.
|
||
# The CLI is invoked by Hub with a disposable HOME and the ACTIVE Feishu
|
||
# Application Connection; the App Secret is never put in Agent argv/env.
|
||
HUB_FEISHU_CLI_BIN="/usr/local/bin/lark-cli"
|
||
HUB_SYSTEMD_UNIT="cph-hub-example.service"
|
||
|
||
# Absolute path to the `cph` binary (ADR-0016). Production preflight requires
|
||
# the file to be executable and `cph --version` to succeed.
|
||
#
|
||
# Always set this explicitly. `cph` is also the command name of the unrelated
|
||
# PyPI package conda-package-handling, so on any host with miniconda on PATH a
|
||
# bare `cph` resolves to the wrong tool and exports fail with an argparse
|
||
# "invalid choice: 'build'" that gives no hint about the name collision.
|
||
CPH_BIN="/usr/local/bin/cph"
|
||
|
||
# The `cph-render` typst package directory (the folder holding lib.typ /
|
||
# typst.toml). Needed by PDF export: when unset, cph falls back to resolving the
|
||
# repo-relative `render/`, which does not exist in a deployed layout.
|
||
CPH_RENDER_DIR="/opt/curriculum-project-hub/render"
|
||
|
||
# Hub bind address and port. Production defaults to loopback for a local TLS
|
||
# reverse proxy; both values are validated and honored by the HTTP server.
|
||
HOST="127.0.0.1"
|
||
PORT=8788
|
||
|
||
# --- Org admin web (ADR-0021) ---------------------------------------------
|
||
# Public base URL of this Hub (no trailing slash). Used for Feishu OAuth
|
||
# redirect_uri = ${HUB_PUBLIC_BASE_URL}/auth/feishu/callback
|
||
# Configure the same callback URL in the Feishu developer console under
|
||
# Security Settings → Redirect URLs.
|
||
HUB_PUBLIC_BASE_URL="https://hub.example.com"
|
||
|
||
# HMAC secret for signed session + OAuth state cookies. Generate with:
|
||
# openssl rand -base64 32
|
||
HUB_SESSION_SECRET=""
|
||
|
||
# Optional OAuth scope (space-separated). Default: contact:user.base:readonly
|
||
# Apply matching scopes in the Feishu developer console.
|
||
# HUB_OAUTH_SCOPE="contact:user.base:readonly"
|
||
|
||
# Local development/tests only. Production must not set this: systemd injects
|
||
# the fixed cph-secret-keyring credential through CREDENTIALS_DIRECTORY.
|
||
# HUB_SECRET_KEYRING_FILE="/absolute/path/to/dev-keyring.json"
|