knowledge-network/.env.example at main · Jakedismo/knowledge-network · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
# Knowledge Network - Environment Configuration

# Database Configuration
DATABASE_URL="postgresql://username:password@localhost:5432/knowledge_network"
REDIS_URL="redis://localhost:6379"
ELASTICSEARCH_URL="http://localhost:9200"

# JWT Configuration (REQUIRED)
JWT_SECRET="your-super-secure-jwt-secret-key-minimum-32-characters"
JWT_REFRESH_SECRET="your-super-secure-refresh-secret-key-minimum-32-characters"
JWT_EXPIRES_IN="15m"
JWT_REFRESH_EXPIRES_IN="7d"

# Password Security
BCRYPT_ROUNDS=12

# Session Configuration
SESSION_TTL=86400
MAX_FAILED_LOGIN_ATTEMPTS=5
LOCKOUT_DURATION_MINUTES=30

# SSO Configuration (Optional)
ENABLE_SSO=true

# Google OAuth2
GOOGLE_CLIENT_ID="your-google-client-id"
GOOGLE_CLIENT_SECRET="your-google-client-secret"
GOOGLE_CALLBACK_URL="http://localhost:3000/auth/google/callback"

# Microsoft OAuth2
MICROSOFT_CLIENT_ID="your-microsoft-client-id"
MICROSOFT_CLIENT_SECRET="your-microsoft-client-secret"
MICROSOFT_CALLBACK_URL="http://localhost:3000/auth/microsoft/callback"

# SAML Configuration
SAML_ENTRY_POINT="https://your-idp.com/saml/login"
SAML_ISSUER="knowledge-network"
SAML_CALLBACK_URL="http://localhost:3000/auth/saml/callback"
SAML_CERT="-----BEGIN CERTIFICATE-----\nYOUR_CERTIFICATE_HERE\n-----END CERTIFICATE-----"

# API Configuration
API_BASE_URL="http://localhost:3000/api"
GRAPHQL_ENDPOINT="http://localhost:3000/api/graphql"
NEXT_PUBLIC_GRAPHQL_ENDPOINT="http://localhost:3000/api/graphql"
NEXT_PUBLIC_GRAPHQL_WS_ENDPOINT="ws://localhost:3000/api/graphql"

# Realtime Collaboration
COLLAB_PORT=3005
COLLAB_WS_PATH="/ws"
NEXT_PUBLIC_COLLAB_WS_URL="ws://localhost:3005/ws"

# Security Configuration
CORS_ORIGINS="http://localhost:3000,https://yourdomain.com"
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=100
ENABLE_CSRF_PROTECTION=true

# Monitoring & Logging
LOG_LEVEL="info"
ENABLE_AUDIT_LOGGING=true
SENTRY_DSN="your-sentry-dsn"

# Email Configuration (for notifications)
SMTP_HOST="smtp.example.com"
SMTP_PORT=587
SMTP_USER="your-smtp-user"
SMTP_PASS="your-smtp-password"
SMTP_FROM="noreply@yourcompany.com"

# File Upload Configuration
MAX_FILE_SIZE=10485760
UPLOAD_DIR="./uploads"
ALLOWED_FILE_TYPES="jpg,jpeg,png,gif,pdf,doc,docx,txt,md"

# Feature Flags
FEATURE_SSO_ENABLED=true
FEATURE_API_KEYS_ENABLED=true
FEATURE_RATE_LIMITING_ENABLED=true

# Organization Structure
# Use Prisma org adapter (falls back to in-memory if Prisma missing)
# ORG_ADAPTER=prisma

# Enable org UI (tags + metadata) in editor demo
# NEXT_PUBLIC_ORG_UI_ENABLED=1

# Development/Testing
NODE_ENV="development"
DEBUG_MODE=true

# AI Integration
OPENAI_API_KEY="sk-"
# Optional overrides
OPENAI_BASE_URL=""
OPENAI_ORG_ID=""
# OpenAI Defaults
AI_DEFAULT_MODEL="gpt-5-mini"
AI_REQUEST_TIMEOUT_MS=60000
AI_RPM=30
# AI Assistant Feature Flags
AI_ENGINE="agents"
USE_ORG_GUARD=1
AGENTS_SUMMARIZE_ENABLED=1
AGENTS_TRANSLATE_ENABLED=1
OPENAI_AGENTS_MODE="openai"
# AI Features in Dev mode comment out for prod
NEXT_PUBLIC_ASSISTANT_MODE="agents"
NEXT_PUBLIC_ASSISTANT_STREAM=true
NEXT_PUBLIC_DEV_USER_ID="u1"
NEXT_PUBLIC_DEV_WORKSPACE_ID="w1"
# Go around JWT and authentication flow comment out for prod
AI_REQUIRE_RBAC=0
# Disable OpenAI RealTime Beta API
REALTIME_USE_BETA=false