agentifui/.env.prod.example at main · iflabx/agentifui · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
# Production runtime profile (copy to .env.prod and fill secrets).

NODE_ENV=production
PORT=3000
NEXT_PUBLIC_APP_URL=http://127.0.0.1:3000
BETTER_AUTH_URL=http://127.0.0.1:3000

# Data services (prod isolation: use dedicated DB/Redis/Bucket)
DATABASE_URL=postgresql://agentif_app:agentif_app@127.0.0.1:5432/agentifui_prod
MIGRATOR_DATABASE_URL=postgresql://agentif:agentif@127.0.0.1:5432/agentifui_prod
APP_DATABASE_ROLE=agentif_app
APP_DATABASE_PASSWORD=replace_with_strong_password
APP_RLS_STRICT_MODE=1

REDIS_URL=redis://127.0.0.1:6379/1
REDIS_PREFIX=agentifui-prod

S3_ENDPOINT=http://127.0.0.1:9000
S3_BUCKET=agentifui-prod
S3_ACCESS_KEY_ID=minioadmin
S3_SECRET_ACCESS_KEY=minioadmin
S3_REGION=us-east-1
S3_ENABLE_PATH_STYLE=1

# Required secrets (must differ from dev values)
BETTER_AUTH_ENABLED=true
AUTH_BACKEND=better-auth
BETTER_AUTH_SECRET=replace_with_32_plus_random_chars
# Set false to hide GitHub social-login entry points in auth screens.
NEXT_PUBLIC_GITHUB_LOGIN_ENABLED=true
API_ENCRYPTION_KEY=replace_with_64_hex_chars

# Dify temp config (admin-only; disabled by default)
# DIFY_TEMP_CONFIG_ENABLED=0
# DIFY_TEMP_CONFIG_ALLOWED_HOSTS=dify.example.com,*.dify.internal
# DIFY_TEMP_CONFIG_ALLOW_PRIVATE=0
# Dify input moderation gate (Fastify proxy; fail-closed when enabled)
# DIFY_INPUT_MODERATION_ENABLED=0
# DIFY_INPUT_MODERATION_APP={"apiUrl":"https://your-dify-host/v1","apiKey":"app-xxxxxxxxxxxxxxxx"}

# Fastify sidecar + Next rewrite bridge
FASTIFY_PROXY_ENABLED=1
FASTIFY_PROXY_BASE_URL=http://127.0.0.1:3010
# Optional override. If set manually, keep this list aligned with .env.example.
# FASTIFY_PROXY_PREFIXES=/api/dify,/api/content,/api/internal/data,/api/internal/apps,/api/internal/profile,/api/internal/error-events/client,/api/internal/realtime,/api/internal/storage,/api/internal/ops/dify-resilience,/api/internal/dify-config,/api/internal/fastify-health,/api/admin,/api/translations
FASTIFY_API_HOST=0.0.0.0
FASTIFY_API_PORT=3010
NEXT_UPSTREAM_BASE_URL=http://127.0.0.1:3000

# CORS
CORS_ALLOWED_ORIGINS=http://127.0.0.1:3000

# M9 gap-test commands (required in prod acceptance when require_all=1)
M9_GAP_DIFY_REAL_PROVIDER_COMMAND="pnpm -s m9:gap:dify-real-provider:verify"
M9_GAP_LOCAL_STATE_COMMAND="pnpm -s m9:gap:local-state:verify"
M9_GAP_TRANSLATIONS_COMMAND="pnpm -s m9:gap:translations:verify"