# ─── geo-rankly deployment configuration ──────────────────────────────────────
# Copy this file to .env and fill in the required values.
# Do NOT commit .env to version control.

# ─── Image registry (for pulling pre-built images) ───────────────────────────
# Change to your registry prefix, e.g. ghcr.io/your-org/geo-rankly
IMAGE_REGISTRY=ghcr.io/your-org/geo-rankly
IMAGE_TAG=latest

# ─── Required: API Keys ────────────────────────────────────────────────────────
# LLM provider API key (Ark / Doubao / OpenAI-compatible)
LLM_API_KEY=your-llm-api-key-here

# Embedding + reranker API key (SiliconFlow)
SILICONFLOW_API_KEY=your-siliconflow-api-key-here

# ─── Required: Security ───────────────────────────────────────────────────────
# JWT signing secret — use a strong random string in production
# Generate: openssl rand -hex 32
JWT_SECRET=change-me-in-production
OPS_JWT_SECRET=change-me-in-production
OPS_DEFAULT_ADMIN_PASSWORD=change-me-before-first-start
SCHEDULER_INTERNAL_METRICS_TOKEN=change-me-scheduler-metrics-token

# ─── Optional: MinIO credentials ─────────────────────────────────────────────
MINIO_ROOT_USER=minioadmin
MINIO_ROOT_PASSWORD=minioadmin

# ─── Optional: Exposed ports ─────────────────────────────────────────────────
# Defaults avoid common NAS ports such as 80, 8080, and 8090.
FRONTEND_PORT=18080
API_PORT=18081
OPS_WEB_PORT=18082
OPS_API_PORT=18090
RABBITMQ_MGMT_PORT=15673
MINIO_CONSOLE_PORT=19001