4b45d33142
Some checks failed
API contract / OpenAPI type drift (push) Failing after 12m57s
관리자 /admin/ai 화면에서 provider 토큰(OAuth 액세스 토큰 또는 API 키)을 발급받아 붙여넣으면 DB에 암호화 저장되고, shared-secret으로 보호되는 게이트웨이 내부 엔드포인트로 push되어 실행 중인 엔진 컨테이너에 즉시 적용된다. NAS처럼 게이트웨이가 컨테이너로 도는 환경에서 CLI·로컬 PC 의존 없이 claude_api·openai·openrouter를 연결할 수 있다. - 게이트웨이: openrouter 어댑터 신설(chat/completions), OAuth 토큰이면 Anthropic Bearer 헤더, /internal/provider-credentials GET/POST와 boot_id 기반 재동기화 - API: app.admin_provider_credential 테이블(idempotent DDL), stdlib HMAC-CTR+MAC 암호화 서비스(PROVIDER_CREDENTIAL_SECRET, 폴백 SESSION_SECRET), /admin/providers CRUD·검증 라우트 - 웹: 제공자 연결 패널(저장·검증·해제, 토큰 힌트만 표시), 엔진 선택에 OpenRouter 추가, api.gen.ts 재생성 - compose: api 서비스에 PROVIDER_CREDENTIAL_SECRET 전달(로컬·NAS)
103 lines
4.9 KiB
Text
103 lines
4.9 KiB
Text
# Vignette infra env (예시). cp .env.example .env 후 값 채우기
|
|
POSTGRES_USER=vignette_owner
|
|
ENVIRONMENT=prod
|
|
POSTGRES_PASSWORD=change-me
|
|
POSTGRES_DB=vignette
|
|
APP_DB_USER=vignette_app
|
|
APP_DB_PASSWORD=change-me-app
|
|
INSTALL_RAG=false
|
|
USER_UPLOAD_DIR=/app/uploads
|
|
SESSION_SECRET=change-me-random
|
|
# G3~G8 evaluator/automation ingestion tokens. Generate six distinct random
|
|
# values of at least 32 characters; never reuse one token across boundaries.
|
|
VIGNETTE_RUPTURE_INTERNAL_TOKEN=replace-with-random-g3-token
|
|
VIGNETTE_PRACTICE_INTERNAL_TOKEN=replace-with-random-g4-token
|
|
VIGNETTE_CALIBRATION_TRANSFER_INTERNAL_TOKEN=replace-with-random-g5-token
|
|
VIGNETTE_SUPERVISION_RESEARCH_INTERNAL_TOKEN=replace-with-random-g6-token
|
|
VIGNETTE_MULTIMODAL_ALLIANCE_INTERNAL_TOKEN=replace-with-random-g7-token
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_INTERNAL_TOKEN=replace-with-random-g8-token
|
|
# G8 agentic scheduler and drift ingestion are independently opt-in.
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_PRODUCER_ENABLED=false
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_PRODUCER_INTERVAL_SECONDS=3600
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_PRODUCER_STARTUP_DELAY_SECONDS=30
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_PRODUCER_RETRY_DELAY_SECONDS=300
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_PRODUCER_LEASE_TIMEOUT_SECONDS=1800
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_PRODUCER_ENGINE_TIMEOUT_SECONDS=300
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_PRODUCER_BATCH_SIZE=1
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_DRIFT_TRIGGER_ENABLED=false
|
|
# Human authorization alone never executes rollback. Keep this disabled until a
|
|
# TLS-authenticated, idempotent NAS control-plane endpoint is provisioned.
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_ROLLBACK_EXECUTOR_ENABLED=false
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_ROLLBACK_EXECUTOR_ENDPOINT=
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_ROLLBACK_EXECUTOR_TOKEN=
|
|
VIGNETTE_CONTINUOUS_IMPROVEMENT_ROLLBACK_EXECUTOR_TIMEOUT_SECONDS=30
|
|
AUTH_ALLOWED_EMAIL_DOMAINS=["hs.ac.kr","twentyoz.kr"]
|
|
AUTH_TEACHER_EMAILS=[]
|
|
AUTH_ADMIN_EMAILS=[]
|
|
AUTH_SUPER_ADMIN_EMAILS=["yunchan@twentyoz.kr","hoonjungkoo@hs.ac.kr"]
|
|
AUTH_APPROVED_EMAILS=[]
|
|
AUTH_NEW_USER_DEFAULT_STATUS=pending
|
|
AUTH_DEV_LOGIN_ENABLED=false
|
|
AUTH_DEV_LOGIN_EXTRA_ORIGINS=[]
|
|
DEFAULT_AFFILIATION=
|
|
AUTO_SEED_PERSONAS=false
|
|
ALLOW_SEED_PERSONA_FALLBACK=false
|
|
EVALUATOR_GOLDEN_FEWSHOT_ENABLED=false
|
|
OAUTH_GOOGLE_CLIENT_ID=
|
|
OAUTH_GOOGLE_CLIENT_SECRET=
|
|
OAUTH_REDIRECT_URI=https://api-vignette.chanpaca.net/auth/callback
|
|
FRONTEND_BASE_URL=https://vignette.chanpaca.net
|
|
FRONTEND_ORIGIN_MAP={"api-vignette.chanpaca.net":"https://vignette.chanpaca.net","api-vnet.18ka.net":"https://vnet.18ka.net"}
|
|
CORS_ORIGINS=["https://vignette.chanpaca.net","https://vnet.18ka.net","https://vignette-b1q.pages.dev","http://localhost:5170","http://localhost:5171","http://localhost:5172","http://localhost:5173","http://localhost:5174","http://localhost:5175","http://localhost:5176","http://localhost:5177","http://localhost:5178","http://localhost:5179","http://localhost:5180","http://127.0.0.1:5170","http://127.0.0.1:5171","http://127.0.0.1:5172","http://127.0.0.1:5173","http://127.0.0.1:5174","http://127.0.0.1:5175","http://127.0.0.1:5176","http://127.0.0.1:5177","http://127.0.0.1:5178","http://127.0.0.1:5179","http://127.0.0.1:5180"]
|
|
# For local-only compose development, set ENVIRONMENT=dev and add http://localhost:5173 to CORS_ORIGINS.
|
|
NOTIFICATION_EMAIL_PROVIDER=disabled
|
|
NOTIFICATION_EMAIL_MAX_ATTEMPTS=3
|
|
NOTIFICATION_EMAIL_RETRY_SECONDS=900
|
|
SMTP_HOST=
|
|
SMTP_PORT=587
|
|
SMTP_USERNAME=
|
|
SMTP_PASSWORD=
|
|
SMTP_FROM_EMAIL=
|
|
SMTP_FROM_NAME=Vignette
|
|
SMTP_STARTTLS=true
|
|
SMTP_SSL=false
|
|
OPENAI_API_KEY=
|
|
OPENAI_BASE_URL=https://api.openai.com/v1
|
|
# 관리자 연결 UI(/admin/ai) provider 토큰 암호화 마스터 키. 비우면 SESSION_SECRET에서 파생.
|
|
PROVIDER_CREDENTIAL_SECRET=
|
|
VIGNETTE_VOICE_STT_PROVIDER=openai
|
|
DEEPGRAM_API_KEY=
|
|
DEEPGRAM_STT_URL=wss://api.deepgram.com/v1/listen
|
|
DEEPGRAM_STT_MODEL=nova-3
|
|
DEEPGRAM_STT_LANGUAGE=ko
|
|
DEEPGRAM_ENDPOINTING_MS=300
|
|
DEEPGRAM_UTTERANCE_END_MS=1200
|
|
DEEPGRAM_KEEPALIVE_SECONDS=4
|
|
DEEPGRAM_FINALIZE_TIMEOUT_SECONDS=15
|
|
DEEPGRAM_MIP_OPT_OUT=true
|
|
VIGNETTE_VOICE_POC_SAMPLE_TTS=false
|
|
VIGNETTE_VOICE_POC_SAMPLE_TTS_DIR=
|
|
VIGNETTE_VOICE_TTS_PROVIDER=openai
|
|
VIGNETTE_HIGGS_TTS_URL=http://host.docker.internal:9881
|
|
VIGNETTE_HIGGS_TTS_TIMEOUT_SECONDS=300
|
|
ANTHROPIC_API_KEY=
|
|
# 엔진(이식성): 게이트웨이는 claude_cli/claude_api/codex_cli/agy_cli를 라우팅한다.
|
|
ENGINE_MODE=claude_cli
|
|
ENGINE_URL=http://host.docker.internal:9099
|
|
# 선택: NAS/원격 preview에서는 API와 호스트 gateway에 동일한 32자 이상 임의 값을 주입한다.
|
|
ENGINE_GATEWAY_SHARED_SECRET=
|
|
# 상담 왕복은 호스트의 privacy-safe 상주 Claude lane으로 분리한다.
|
|
VIGNETTE_LIVE_CLIENT_PROVIDER=claude_cli
|
|
# 아래 값은 컨테이너가 아니라 호스트의 engine_gateway 프로세스에 주입한다.
|
|
CLAUDE_BIN=claude
|
|
CODEX_BIN=codex
|
|
AGY_BIN=agy
|
|
ANTHROPIC_API_BASE=https://api.anthropic.com
|
|
ENGINE_CLI_CWD=
|
|
ENGINE_CAPABILITY_CACHE_TTL_SECONDS=60
|
|
ENGINE_CLI_TIMEOUT_SECONDS=300
|
|
# 외부노출(비우면 로컬 :80)
|
|
SITE_ADDRESS=:80
|
|
ACME_EMAIL=
|
|
HTTP_PORT=8080
|
|
HTTPS_PORT=8443
|