690419:1831 feat: update CI/CD to use SSH key authentication #05

2026-04-19 18:31:30 +07:00
parent 733f3c3987
commit 13745e5874
61 changed files with 6709 additions and 1241 deletions
@@ -5,14 +5,94 @@
 # วิธีใช้ (บน QNAP):
 #   cp /share/np-dms/.env.master  /share/np-dms/app/.env
 #   chmod 600 /share/np-dms/app/.env
-
 # --- ใช้โดย docker-compose-app.yml ---
-DB_PASSWORD=
-REDIS_PASSWORD=
+# File: .env (Unified for QNAP / Gitea Runner)
+# Change Log: 2026-04-19
+
+# ---------------------------------------------------------
+# 1. Backend Service Configuration
+# ---------------------------------------------------------
+TZ=Asia/Bangkok
+NODE_ENV=production
+PORT=3000
+
+# --- Database (MariaDB) ---
+DB_HOST=mariadb
+DB_PORT=3306
+DB_DATABASE=lcbp3
+DB_USERNAME=center
+DB_PASSWORD=Center#2025
+
+# --- Redis (Cache & Queue) ---
+REDIS_HOST=cache
+REDIS_PORT=6379
+REDIS_PASSWORD=redis3ac466bf9b6
+
+# --- Search (Elasticsearch) ---
+ELASTICSEARCH_HOST=search
+ELASTICSEARCH_PORT=9200
 ELASTICSEARCH_USERNAME=elastic
-ELASTICSEARCH_PASSWORD=
-JWT_SECRET=
-JWT_REFRESH_SECRET=
-AUTH_SECRET=
+ELASTICSEARCH_PASSWORD=elasticed0bbde94
+
+# --- Security (JWT) ---
+JWT_SECRET=jwtsecret65adde8c76c6a0847d9649b2b67a06db1504693e6c912e51499b76e
+JWT_EXPIRATION=24h
+JWT_REFRESH_SECRET=jwtrefreshf6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2
+
+# --- Numbering Logic ---
+NUMBERING_LOCK_TIMEOUT=5000
+NUMBERING_RESERVATION_TTL=300
+
+# --- File Storage ---
+UPLOAD_TEMP_DIR=/share/np-dms-as/data/uploads/temp
+UPLOAD_PERMANENT_DIR=/share/np-dms-as/data/uploads/permanent
+MAX_FILE_SIZE=52428800
+
+# ---------------------------------------------------------
+# 2. Frontend Service Configuration
+# ---------------------------------------------------------
+# หมายเหตุ: ค่าเหล่านี้จะถูกใช้ตอน Docker Build (ตาม deploy.sh)
+NEXT_PUBLIC_API_URL=https://backend.np-dms.work/api
+AUTH_URL=https://lcbp3.np-dms.work
+
+# --- NextAuth ---
+# ค่านี้ต้องตรงกับ JWT_SECRET หรือตั้งแยกตามความปลอดภัย
+AUTH_SECRET=jwtsecret65adde8c76c6a0847d9649b2b67a06db1504693e6c912e51499b76e
+AUTH_TRUST_HOST=true
+
+# --- Shared Context ---
+INTERNAL_API_URL=http://backend:3000/api
+HOSTNAME=0.0.0.0
+
+# --- Docker Image ---
 BACKEND_IMAGE_TAG=latest
 FRONTEND_IMAGE_TAG=latest
+
+# ClamAV
+CLAMAV_HOST=localhost
+CLAMAV_PORT=3310
+
+# ========================================
+# ADR-022 RAG — Retrieval-Augmented Generation
+# ========================================
+
+# Qdrant vector store (local docker-compose or QNAP)
+QDRANT_URL=http://localhost:6333
+
+# Ollama (Admin Desktop Desk-5439 — ADR-018 AI boundary)
+OLLAMA_EMBED_MODEL=nomic-embed-text
+OLLAMA_RAG_MODEL=gemma3:12b
+OLLAMA_URL=http://192.168.20.200:11434
+
+# Thai preprocessing microservice (PyThaiNLP — Admin Desktop)
+THAI_PREPROCESS_URL=http://192.168.20.200:8765
+
+# Typhoon API (cloud LLM — PUBLIC/INTERNAL only, never CONFIDENTIAL)
+TYPHOON_API_KEY=your-typhoon-api-key-here
+TYPHOON_API_URL=https://api.opentyphoon.ai/v1
+
+# RAG query config
+RAG_TOPK=20
+RAG_FINAL_K=5
+RAG_TIMEOUT_MS=5000
+RAG_QUERY_CACHE_TTL=300