strand/.env.docker.example at main · potalora/strand · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
# ─────────────────────────────────────────────────────────────────────────────
# MedTimeline — Docker environment.
# Copy to `.env`, then run `just gen-secrets` (or scripts/gen-secrets.sh) to fill
# the three blank secrets below:
#     cp .env.docker.example .env && just gen-secrets
# This file is read by `docker compose` for ${VAR} interpolation AND injected into
# the backend/migrate containers via `env_file: .env`.
# ─────────────────────────────────────────────────────────────────────────────

# ── Secrets (REQUIRED) — leave blank; `just gen-secrets` fills them in place ──
# Postgres superuser password. Also used (by docker-compose.yml) to build DATABASE_URL.
DB_PASSWORD=
# JWT signing secret. The app refuses to start in production with the default value.
JWT_SECRET_KEY=
# AES-256 key for PII-at-rest (pgcrypto). The app hard-fails if this is empty.
DATABASE_ENCRYPTION_KEY=

# ── AI (OPTIONAL) ────────────────────────────────────────────────────────────
# Leave empty for prompt-only mode (build de-identified prompts you run externally).
# Set it to enable live summarization + PDF/TIFF text extraction + cloud entity extraction.
GEMINI_API_KEY=

# ── Database / cache ─────────────────────────────────────────────────────────
POSTGRES_DB=medtimeline
# DATABASE_URL and REDIS_URL are set automatically by docker-compose.yml for the
# containers — you do NOT need to set them here:
#   DATABASE_URL=postgresql+asyncpg://postgres:${DB_PASSWORD}@db:5432/${POSTGRES_DB}
#   REDIS_URL=redis://redis:6379/0

# ── App ──────────────────────────────────────────────────────────────────────
# This stack serves loopback HTTP and must not be exposed beyond localhost.
# Non-loopback deployments need a separate TLS reverse proxy and production settings.
APP_ENV=local
CORS_ORIGINS=http://localhost:3000
# Image tag used for both build and pull. Bump to upgrade, then: docker compose pull && up -d
APP_VERSION=latest
# Browser-visible API base URL, baked into the frontend image at build time.
NEXT_PUBLIC_API_URL=http://localhost:8000/api/v1

# ── Extraction engine (build-time) ───────────────────────────────────────────
# false = cloud LangExtract (light, default).
# true  = bake the on-device medspaCy + scispaCy stack into the backend image for
#         heavier local entity extraction (~1.8 GB RAM at startup, larger image).
CLINICAL_NLP=false