root
f3679e6176
Introduce a self-contained kustomize stack under deploy/k3s covering namespace, config, placeholder secrets, infra StatefulSets, app Deployments/Services, migration and minio-init Jobs, and Traefik Ingress for both tenant and ops hosts. Add Dockerfile.ops-web so the operations frontend can ship as an nginx image, and extend the offline package script to build and bundle ops-api, kol-assist-worker, and ops-web alongside the k3s manifests. Wire the new ops/security knobs through .env.example and the compose stack. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
35 lines
1.9 KiB
Bash
35 lines
1.9 KiB
Bash
# ─── geo-rankly deployment configuration ──────────────────────────────────────
|
|
# Copy this file to .env and fill in the required values.
|
|
# Do NOT commit .env to version control.
|
|
|
|
# ─── Image registry (for pulling pre-built images) ───────────────────────────
|
|
# Change to your registry prefix, e.g. ghcr.io/your-org/geo-rankly
|
|
IMAGE_REGISTRY=ghcr.io/your-org/geo-rankly
|
|
IMAGE_TAG=latest
|
|
|
|
# ─── Required: API Keys ────────────────────────────────────────────────────────
|
|
# LLM provider API key (Ark / Doubao / OpenAI-compatible)
|
|
LLM_API_KEY=your-llm-api-key-here
|
|
|
|
# Embedding + reranker API key (SiliconFlow)
|
|
SILICONFLOW_API_KEY=your-siliconflow-api-key-here
|
|
|
|
# ─── Required: Security ───────────────────────────────────────────────────────
|
|
# JWT signing secret — use a strong random string in production
|
|
# Generate: openssl rand -hex 32
|
|
JWT_SECRET=change-me-in-production
|
|
OPS_JWT_SECRET=change-me-in-production
|
|
OPS_DEFAULT_ADMIN_PASSWORD=change-me-before-first-start
|
|
SCHEDULER_INTERNAL_METRICS_TOKEN=change-me-scheduler-metrics-token
|
|
|
|
# ─── Optional: MinIO credentials ─────────────────────────────────────────────
|
|
MINIO_ROOT_USER=minioadmin
|
|
MINIO_ROOT_PASSWORD=minioadmin
|
|
|
|
# ─── Optional: Exposed ports ─────────────────────────────────────────────────
|
|
FRONTEND_PORT=80
|
|
API_PORT=8080
|
|
OPS_API_PORT=8090
|
|
RABBITMQ_MGMT_PORT=15672
|
|
MINIO_CONSOLE_PORT=9001
|