DEEIX-Chat/config.full.example.yaml at dev · DEEIX-AI/DEEIX-Chat · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
app:
  name: DEEIX Chat
  # Required. Use prod and replace security values before public deployment.
  env: dev

# Docker reads /app/config.yaml by default because compose mounts ./config.yaml there.
# Effective priority is environment variables > config.yaml > built-in defaults.
# Runtime business settings are stored in the database and managed from the admin console.

server:
  # Optional. Change these values only when exposed ports or public URLs differ.
  # Optional. If http_port changes, also update the compose port mapping.
  http_port: "8080"
  cors_allow_origin: "http://localhost:8080,http://127.0.0.1:8080"
  trusted_proxies: "127.0.0.1/32,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,::1/128,fc00::/7"
  public_api_base_url: "http://localhost:8080"
  public_web_base_url: "http://localhost:8080"
  frontend_dist_dir: "/app/frontend/out"
  read_header_timeout_seconds: 10
  read_timeout_seconds: 120
  idle_timeout_seconds: 120
  max_header_bytes: 1048576

security:
  # Required. Replace both values with strong random secrets before deployment.
  # Required. data_encryption_key protects upstream API keys, SSO secrets, MCP tokens, and TOTP secrets.
  jwt_secret: "change-me-dev-jwt-secret"
  data_encryption_key: "change-me-dev-data-encryption-key-32-bytes-min"
  # Optional. Enable in production to block outbound requests to private or metadata networks.
  ssrf_protection_enabled: false
  # Optional. Override only when using a compatible Turnstile verification proxy.
  turnstile_siteverify_url: "https://challenges.cloudflare.com/turnstile/v0/siteverify"

branding:
  # Optional. Frontend product branding; changes take effect after restarting the app.
  title: DEEIX Chat
  short_name: DEEIX
  description: DEEIX Chat is a multi-model AI conversation system.
  logo_url: ""
  favicon_url: /favicon.ico
  pwa_icon_192_url: /pwa/icon-192.png
  pwa_icon_512_url: /pwa/icon-512.png
  pwa_maskable_icon_512_url: /pwa/icon-maskable-512.png
  apple_touch_icon_180_url: /pwa/apple-touch-icon.png

database:
  # Required. PostgreSQL is used for this profile.
  driver: postgres
  postgres:
    # Required when database.driver is postgres.
    # Optional. docker-compose.full.yml overrides this value with the bundled PostgreSQL service.
    dsn: "postgres://deeix_chat:deeix_chat_2026@postgres:5432/deeix_chat?sslmode=disable&TimeZone=Asia/Shanghai"
    max_open_conns: 30
    max_idle_conns: 10
    conn_max_lifetime_minutes: 60
    conn_max_idle_time_minutes: 10
  redis:
    # Required when cache.driver is redis.
    # Optional. docker-compose.full.yml overrides this value with the bundled Redis service.
    addr: "redis:6379"
    # Optional. Set when Redis ACL requires a username.
    username: ""
    password: "deeix_chat_2026"
    db: 0
    # Optional. Enable TLS for providers such as Upstash Redis.
    tls_enabled: false
    # Optional. Skip Redis TLS certificate verification only for nonstandard endpoints.
    tls_insecure_skip_verify: false

cache:
  # Required. Redis is used for this profile.
  driver: redis

storage:
  # Required. Use local for filesystem storage or s3 for object storage.
  backend: local
  local:
    root_dir: /app/storage
  s3:
    # Required when storage.backend is s3.
    endpoint: ""
    region: auto
    bucket: ""
    prefix: ""
    access_key_id: ""
    secret_access_key: ""
    force_path_style: true

geoip:
  # Optional. Use none to disable, ipwhois for public lookup, or mmdb for a local GeoLite2/MMDB database.
  provider: ipwhois
  # Optional. Leave these commented unless provider is set to mmdb.
  # database_url: "https://example.com/path/to/GeoLite2-City.mmdb"
  # database_path: "/app/data/geoip/GeoLite2-City.mmdb"
  # database_max_bytes: 104857600
  # refresh_interval_hours: 168
  # timeout_ms: 2500

observability:
  tracing:
    # Optional. Set endpoint to auto-enable tracing, or set enabled explicitly.
    # enabled: true
    endpoint: ""
    headers: ""
    insecure: false
    sampling_rate: 1