westfarn
32f57c2376
## Summary - Closes #80. - Password self-registration is on by default (`ENABLE_ACCOUNT_REGISTRATION`). `/user/create/` issues tokens and `needs_checkout`, and the web sign-up page already redirects into Stripe Checkout. - Browser SSO stays off (`ENABLE_SSO`, default false). Live Google and Microsoft client ids stay available for Drive linking, but public settings no longer advertise them, and login/signup OAuth start and callback are rejected. Stripe path checked before this change: Checkout builds a subscription session (Founders at $10/month, or `STRIPE_PRICE_ID`), stores a draft invoice, and signed `checkout.session.completed` / `invoice.paid` webhooks grant the plan. Checkout, webhook, portal, registration, and OAuth tests passed. ## Deploy note If `chat_backend_prod.env` or `chat_backend_beta.env` on the control node still sets `ENABLE_ACCOUNT_REGISTRATION=false`, that line overrides this default. Set it to `true` or remove it, and leave `ENABLE_SSO` unset or `false`. ## Test plan - [ ] `GET /api/public/settings/` returns `enable_account_registration: true` and `oauth.google` / `oauth.microsoft` false. - [ ] Sign-up form creates an account and redirects to Stripe Checkout. No Google or Microsoft button. - [ ] Checkout success grants the Founders plan after the webhook. - [ ] `/api/auth/oauth/google/start/?intent=signup` returns 403. Drive connect still starts. - [ ] Setting `ENABLE_ACCOUNT_REGISTRATION=false` closes `/user/create/` again. Reviewed-on: #81
140 lines
6.3 KiB
Bash
140 lines
6.3 KiB
Bash
# Local development environment file (copy to .env).
|
|
# For production server values, use .env.prod.example instead.
|
|
DJANGO_ENV=dev
|
|
DJANGO_DEBUG=true
|
|
DJANGO_SECRET_KEY=change-me-for-local-development
|
|
DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1,0.0.0.0
|
|
# Optional; when unset, http:// origins are derived for local hosts.
|
|
# DJANGO_CSRF_TRUSTED_ORIGINS=http://localhost:8003,http://127.0.0.1:8003
|
|
|
|
# Database (docker-compose sets DATABASE_URL for the web service)
|
|
DATABASE_URL=postgres://chat_backend:chat_backend@db:5432/chat_backend
|
|
|
|
# Ollama — local loopback when Ollama runs on this machine; LAN IP for GPU host.
|
|
OLLAMA_BASE_URL=http://127.0.0.1:11434
|
|
# Legacy fallback (used when role-specific vars unset). Prefer the role vars.
|
|
# OLLAMA_MODEL=gpt-oss:20b
|
|
# OLLAMA_MODEL_THINKING=gpt-oss:20b
|
|
# OLLAMA_MODEL_FAST=gemma4:latest
|
|
# OLLAMA_MODEL_UTILITY=llama3.2
|
|
# OLLAMA_EMBED_MODEL=nomic-embed-text
|
|
# OLLAMA_NUM_CTX_THINKING=16384
|
|
# OLLAMA_NUM_CTX_FAST=8192
|
|
# OLLAMA_NUM_CTX_UTILITY=4096
|
|
|
|
# Web search (#62) — SearxNG primary, DDGS failover. See README "SearxNG".
|
|
ALLOW_INTERNET_ACCESS=true
|
|
SEARCH_PROVIDER=searxng
|
|
SEARCH_FAILOVER_PROVIDER=ddgs
|
|
SEARXNG_BASE_URL=http://127.0.0.1:8088
|
|
# SEARXNG_TIMEOUT_SECONDS=8
|
|
|
|
# Email (SMTP2GO) — optional for local
|
|
EMAIL_HOST=mail.smtp2go.com
|
|
EMAIL_HOST_USER=
|
|
EMAIL_HOST_PASSWORD=
|
|
EMAIL_PORT=2525
|
|
EMAIL_USE_TLS=true
|
|
|
|
# Captcha (optional local)
|
|
CAPTCHA_SECRET_KEY=
|
|
|
|
# Password self-serve sign-up (default true). Set false to close /user/create/.
|
|
ENABLE_ACCOUNT_REGISTRATION=true
|
|
# Browser SSO. Leave false until Google / Microsoft sign-in should be public.
|
|
# Client ids below can still be set for Drive linking.
|
|
ENABLE_SSO=false
|
|
|
|
# OAuth SSO — Google / Microsoft (#24). Leave blank to hide SSO buttons.
|
|
# Redirect URIs (register in each IdP console):
|
|
# {OAUTH_CALLBACK_BASE_URL}/api/auth/oauth/google/callback/
|
|
# {OAUTH_CALLBACK_BASE_URL}/api/auth/oauth/microsoft/callback/
|
|
# Same client id/secret pair is reused for Drive linking (#47) — the extra
|
|
# Drive scopes below are requested incrementally via intent=link_drive /
|
|
# intent=link_company_drive, no separate app registration needed:
|
|
# Google: openid email profile https://www.googleapis.com/auth/drive.readonly
|
|
# Microsoft: openid email profile offline_access Files.Read (personal)
|
|
# openid email profile offline_access Files.Read.All Sites.Read.All (company)
|
|
GOOGLE_OAUTH_CLIENT_ID=
|
|
GOOGLE_OAUTH_CLIENT_SECRET=
|
|
MICROSOFT_OAUTH_CLIENT_ID=
|
|
MICROSOFT_OAUTH_CLIENT_SECRET=
|
|
MICROSOFT_OAUTH_TENANT=common
|
|
# Optional; defaults to request host. Example local: http://127.0.0.1:8001
|
|
OAUTH_CALLBACK_BASE_URL=http://127.0.0.1:8001
|
|
|
|
# Drive / RAG sync (#47-#53). Requires a subscription plan with allows_rag
|
|
# (Founders, Pro, Business, Backer by default — see finance PLAN_SEED).
|
|
# Start a link: GET /api/auth/oauth/google/start/?intent=link_drive (authenticated)
|
|
# GET /api/auth/oauth/google/start/?intent=link_company_drive (company manager)
|
|
# GET /api/auth/oauth/microsoft/start/?intent=link_drive
|
|
# GET /api/auth/oauth/microsoft/start/?intent=link_company_drive
|
|
# Manage: GET /api/drive/connections/
|
|
# DELETE /api/drive/connections/<id>/
|
|
# POST /api/drive/connections/<id>/resources/ { "resource_ids": [...] }
|
|
# POST /api/drive/connections/<id>/sync/
|
|
# Provider push notifications (best-effort; register with each provider's
|
|
# subscription/watch API pointing here, using ?connection_id=<id>):
|
|
# POST {OAUTH_CALLBACK_BASE_URL}/api/drive/webhooks/google/
|
|
# POST {OAUTH_CALLBACK_BASE_URL}/api/drive/webhooks/microsoft/
|
|
# Worker sync: `python manage.py sync_drive_connections [--connection-id N]`
|
|
|
|
# Stripe / monetization (optional local — required for checkout + webhooks)
|
|
STRIPE_SECRET_KEY=
|
|
STRIPE_PUBLISHABLE_KEY=
|
|
STRIPE_WEBHOOK_SECRET=
|
|
# Optional: pre-created Stripe Price ID for Founders. When empty, Checkout uses
|
|
# SubscriptionPlan.price_cents / SUBSCRIPTION_PRICE_* ($10 USD / month Founders).
|
|
STRIPE_PRICE_ID=
|
|
# Native store purchases (#78). iOS verifies the StoreKit signed transaction
|
|
# against Apple Root CA G3. Android calls the Play Developer API.
|
|
APPLE_IAP_BUNDLE_ID=ai.hesychia.chat
|
|
GOOGLE_PLAY_PACKAGE_NAME=ai.hesychia.chat
|
|
# Service-account JSON (one line) or a path to the JSON file. Empty disables Play confirm.
|
|
GOOGLE_PLAY_SERVICE_ACCOUNT_JSON=
|
|
# Optional JSON map of store product id → plan slug, e.g.
|
|
# REVENUECAT_PRODUCT_PLAN_MAP={"hesychia_founders_monthly":"founders"}
|
|
# SUBSCRIPTION_PRICE_AMOUNT_CENTS=1000
|
|
# SUBSCRIPTION_PRICE_CURRENCY=usd
|
|
# SUBSCRIPTION_PRICE_INTERVAL=month
|
|
# SUBSCRIPTION_PRODUCT_NAME=Founders
|
|
# Enforce plan feature + prompt/token quotas on chat turns (default true).
|
|
# ENFORCE_SUBSCRIPTION_GATES=true
|
|
FRONTEND_BASE_URL=http://localhost:3000
|
|
|
|
# Agentic task execution (#63) — long-running, multi-step, tool-using turns.
|
|
# Default false: chat behaves exactly like the always-on grounded path (#62),
|
|
# no planner/tools/AgentRun rows. Requires a plan with allows_rag (or
|
|
# allows_all_future_features) — see monetization SubscriptionPlan.allows_feature.
|
|
ALLOW_AGENTIC_TASKS=false
|
|
# Redis — optional. Unset = InMemory channel layer (single process, fine for
|
|
# dev/tests) and agent work runs on a daemon thread instead of Celery.
|
|
# REDIS_URL=redis://127.0.0.1:6379/0
|
|
# CELERY_BROKER_URL=redis://127.0.0.1:6379/0
|
|
# Orchestrator plans + synthesises; sub-agents run independent plan steps
|
|
# concurrently on a smaller/cheaper model.
|
|
# OLLAMA_MODEL_ORCHESTRATOR=gpt-oss:20b
|
|
# OLLAMA_MODEL_SUBAGENT=llama3.2
|
|
# AGENT_MAX_PLAN_STEPS=8
|
|
# AGENT_MAX_ITERATIONS=12
|
|
# AGENT_WALL_CLOCK_SECONDS=600
|
|
# AGENT_SUBAGENT_CONCURRENCY=3
|
|
# AGENT_TOOL_TIMEOUT_SECONDS=20
|
|
# AGENT_TOOL_OUTPUT_MAX_CHARS=8000
|
|
# AGENT_MAX_TOOL_CALLS_PER_RUN=40
|
|
# AGENT_FETCH_URL_MAX_BYTES=2097152
|
|
# Run a worker once REDIS_URL/CELERY_BROKER_URL are set:
|
|
# docker compose --profile agentic up redis worker
|
|
# uv run celery -A llm_be worker --loglevel=info
|
|
# STRIPE_CHECKOUT_SUCCESS_URL=http://localhost:3000/billing/success?session_id={CHECKOUT_SESSION_ID}
|
|
# STRIPE_CHECKOUT_CANCEL_URL=http://localhost:3000/billing/cancel
|
|
# Customer Portal return URL (plan change / cancel / payment method).
|
|
# STRIPE_PORTAL_RETURN_URL=http://localhost:3000/account/
|
|
|
|
# Gunicorn / ASGI
|
|
GUNICORN_WORKERS=2
|
|
GUNICORN_BIND=0.0.0.0:8000
|
|
|
|
# Host port for docker-compose.prod.yml
|
|
WEB_PORT=8003
|