.env.docker.template

# ==========================================
# embapi Docker Environment Configuration
# ==========================================
# 
# This file contains environment variables for running embapi with Docker.
# Copy this file to .env and update the values as needed.
# 
# IMPORTANT: Never commit the actual .env file to version control!

# Service Configuration
# ---------------------
SERVICE_DEBUG=false
SERVICE_HOST=0.0.0.0
SERVICE_PORT=8880

# Database Configuration
# ----------------------
# For docker-compose: Use 'postgres' as the hostname (service name)
# For external database: Use the actual database hostname/IP
SERVICE_DBHOST=postgres
SERVICE_DBPORT=5432
SERVICE_DBUSER=postgres
SERVICE_DBPASSWORD=your_secure_password_here
SERVICE_DBNAME=embapi

# Port Mapping
# ------------
# External port to expose the API (maps to internal SERVICE_PORT)
API_PORT=8880
# External port to expose PostgreSQL (maps to internal 5432)
POSTGRES_PORT=5432

# Security Configuration
# ----------------------
# REQUIRED: Admin API key for administrative operations
# Generate a secure random key for production
SERVICE_ADMINKEY=your_admin_key_here

# REQUIRED: Encryption key for API keys in LLM service instances
# Must be a secure random string, at least 32 characters recommended
# Generate with: openssl rand -hex 32
ENCRYPTION_KEY=your_encryption_key_here_at_least_32_chars

# ==========================================
# Docker-Specific Notes
# ==========================================
#
# 1. To connect to an external postgres-vector database:
#    - Set SERVICE_DBHOST to the external database hostname/IP
#    - Ensure the database has the pgvector extension installed
#    - Comment out or remove the 'postgres' service from docker-compose.yml
#
# 2. To use docker-compose with included PostgreSQL:
#    - Keep SERVICE_DBHOST=postgres
#    - The postgres service will be automatically started
#
# 3. For production deployments:
#    - Always use strong, randomly generated values for passwords and keys
#    - Consider using Docker secrets for sensitive values
#    - Enable HTTPS/TLS for production traffic