# 风七六本地生活服务平台 - 生产环境配置
# ======================================
# 使用说明：
# 1. 复制此文件为 .env.prod
# 2. 修改所有配置项（特别是密码和密钥）
# 3. 部署时使用：docker-compose -f docker-compose.prod.yml --env-file .env.prod up -d
# 4. 注意：此文件包含敏感信息，切勿提交到版本控制！
# ======================================

# ===== 时区配置 =====
TZ=Asia/Shanghai

# ===== 数据库配置 - 阿里云RDS（高可用版）=====
MYSQL_HOST=rm-xxx.mysql.rds.aliyuncs.com
MYSQL_PORT=3306
MYSQL_ROOT_PASSWORD=请在此处设置强密码（至少24位，含大小写字母、数字、特殊字符）
MYSQL_DATABASE=fzx_local_life
MYSQL_USER=fzx_prod
MYSQL_PASSWORD=请在此处设置强密码
MYSQL_READ_HOST=rr-xxx.mysql.rds.aliyuncs.com
MYSQL_READ_PORT=3306

# ===== Redis配置 - 阿里云Redis（集群版）=====
REDIS_HOST=r-xxx.redis.rds.aliyuncs.com
REDIS_PORT=6379
REDIS_PASSWORD=请在此处设置强密码
REDIS_CLUSTER_MODE=true

# ===== PostgreSQL配置（用于Kong）=====
POSTGRES_HOST=pg-xxx.pg.rds.aliyuncs.com
POSTGRES_PORT=5432
POSTGRES_USER=kong
POSTGRES_PASSWORD=请在此处设置强密码
POSTGRES_DB=kong

# ===== Nacos配置 =====
NACOS_MODE=cluster
NACOS_SERVERS=nacos1:8848,nacos2:8848,nacos3:8848
NACOS_AUTH_TOKEN=请在此处设置Nacos认证Token（至少64位）
NACOS_IDENTITY_VALUE=请在此处设置

# ===== Grafana配置 =====
GRAFANA_ADMIN_USER=admin
GRAFANA_ADMIN_PASSWORD=请在此处设置强密码
GRAFANA_SERVER_ROOT_URL=https://grafana.fengqiliu.com

# ===== JWT配置 =====
JWT_SECRET_KEY=请在此处设置JWT密钥（至少512位）
JWT_EXPIRE_TIME=86400000
JWT_REFRESH_EXPIRE_TIME=604800000
JWT_ISSUER=fengqiliu-prod

# ===== 签名配置 =====
SIGNATURE_SECRET=请在此处设置签名密钥

# ===== 应用配置 =====
SPRING_PROFILES_ACTIVE=prod
SPRING_DATASOURCE_URL=jdbc:mysql://${MYSQL_HOST}:${MYSQL_PORT}/${MYSQL_DATABASE}?useUnicode=true&characterEncoding=utf8&useSSL=true&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true
SPRING_DATASOURCE_READ_URL=jdbc:mysql://${MYSQL_READ_HOST}:${MYSQL_READ_PORT}/${MYSQL_DATABASE}?useUnicode=true&characterEncoding=utf8&useSSL=true&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true
SPRING_DATASOURCE_USERNAME=${MYSQL_USER}
SPRING_DATASOURCE_PASSWORD=${MYSQL_PASSWORD}
SPRING_REDIS_HOST=${REDIS_HOST}
SPRING_REDIS_PORT=${REDIS_PORT}
SPRING_REDIS_PASSWORD=${REDIS_PASSWORD}
SPRING_REDIS_CLUSTER_ENABLED=${REDIS_CLUSTER_MODE}

# ===== 日志配置 =====
LOG_LEVEL_ROOT=INFO
LOG_LEVEL_APP=INFO
LOG_LEVEL_SQL=WARN

# ===== 高德地图配置 =====
AMAP_ADMIN_WEB_KEY=请在此处设置
AMAP_ADMIN_WEB_JS_KEY=请在此处设置
AMAP_ADMIN_WEB_SECURITY_KEY=请在此处设置
AMAP_MERCHANT_WEB_KEY=请在此处设置
AMAP_MERCHANT_WEB_SECURITY_KEY=请在此处设置
AMAP_RIDER_ANDROID_KEY=请在此处设置
AMAP_USER_ANDROID_KEY=请在此处设置
AMAP_MINIPROGRAM_KEY=请在此处设置

# ===== 阿里云配置 =====
ALICLOUD_ACCESS_KEY_ID=请在此处设置
ALICLOUD_ACCESS_KEY_SECRET=请在此处设置
ALICLOUD_REGION_ID=cn-hangzhou
ALICLOUD_KMS_ENDPOINT=kms.cn-hangzhou.aliyuncs.com

# ===== OSS配置 =====
OSS_ENDPOINT=oss-cn-hangzhou.aliyuncs.com
OSS_INTERNAL_ENDPOINT=oss-cn-hangzhou-internal.aliyuncs.com
OSS_BUCKET_NAME=fzx-local-life-prod
OSS_ACCESS_KEY_ID=${ALICLOUD_ACCESS_KEY_ID}
OSS_ACCESS_KEY_SECRET=${ALICLOUD_ACCESS_KEY_SECRET}

# ===== CDN配置 =====
CDN_DOMAIN=cdn.fengqiliu.com

# ===== 前端环境变量 =====
API_BASE_URL=https://api.fengqiliu.com
API_BASE_URL_STAGING=https://staging-api.fengqiliu.com
API_BASE_URL_PROD=https://api.fengqiliu.com
WS_URL=wss://api.fengqiliu.com
WS_URL_STAGING=wss://staging-api.fengqiliu.com
WS_URL_PROD=wss://api.fengqiliu.com

# ===== 支付配置 =====
PAYMENT_ALIPAY_APP_ID=请在此处设置
PAYMENT_ALIPAY_PRIVATE_KEY=请在此处设置
PAYMENT_ALIPAY_PUBLIC_KEY=请在此处设置
PAYMENT_WECHAT_APP_ID=请在此处设置
PAYMENT_WECHAT_MCH_ID=请在此处设置
PAYMENT_WECHAT_API_KEY=请在此处设置

# ===== 短信配置 =====
SMS_ALIYUN_ACCESS_KEY_ID=${ALICLOUD_ACCESS_KEY_ID}
SMS_ALIYUN_ACCESS_KEY_SECRET=${ALICLOUD_ACCESS_KEY_SECRET}
SMS_ALIYUN_SIGN_NAME=风七六
SMS_ALIYUN_TEMPLATE_CODE_VERIFY=SMS_123456789

# ===== 推送配置 =====
PUSH_JIGUANG_APP_KEY=请在此处设置
PUSH_JIGUANG_APP_SECRET=请在此处设置

# ===== 备份配置 =====
BACKUP_DIR=/backup
BACKUP_RETENTION_DAYS=30
BACKUP_SCHEDULE=0 2 * * *
OSS_BACKUP_BUCKET=fzx-backup-prod

# ===== 告警配置 =====
ALERT_EMAIL=alert@fengqiliu.com
ALERT_PHONE=13800138000
ALERT_DINGTALK_WEBHOOK=https://oapi.dingtalk.com/robot/send?access_token=xxx
ALERT_DINGTALK_SECRET=请在此处设置

# ===== 监控配置 =====
ARMS_APP_ID=请在此处设置
SLS_PROJECT=fzx-local-life-prod
SLS_LOGSTORE=app-logs

# ===== 安全配置 =====
ENABLE_HTTPS=true
SSL_CERT_PATH=/etc/ssl/fengqiliu.com.pem
SSL_KEY_PATH=/etc/ssl/fengqiliu.com.key
WAF_ENABLED=true