# ============================================================================= # CookHero Environment Variables # ============================================================================= # This file contains all environment variables for the CookHero application. # Copy this file to .env and fill in the actual values. # # IMPORTANT: Never commit the .env file to version control! # ============================================================================= # ============================================================================= # 1. LLM API Configuration # ============================================================================= # API keys for LLM providers. Keys are loaded from .env, never hardcoded. # Primary LLM API Key (used by normal tier models) # Required for main response generation LLM_API_KEY=sk-your-primary-api-key-here # Fast Model API Key (used by fast tier models) # Falls back to LLM_API_KEY if not set FAST_LLM_API_KEY=sk-your-fast-model-api-key-here # Vision/Multimodal API Key (for image analysis) VISION_API_KEY=sk-your-vision-model-api-key-here # Reranker API Key (for result reranking) RERANKER_API_KEY=sk-your-reranker-api-key-here # ============================================================================= # 2. Web Search Configuration # ============================================================================= # You.com API Key - Get from https://ydc-index.io/ # Used for both Search and Deep Research (replaces Tavily) YOUCOM_API_KEY=ydc-your-youcom-api-key-here # ============================================================================= # 3. Image Generation Configuration # ============================================================================= # OpenAI API Key for DALL-E 3 image generation OPENAI_IMAGE_API_KEY=sk-your-openai-api-key-here # ============================================================================= # 4. MCP (Model Context Protocol) Configuration # ============================================================================= # Amap (高德地图) API Key - Get from https://console.amap.com/ AMAP_API_KEY=your-amap-api-key-here # ============================================================================= # 5. Database Configuration # ============================================================================= DATABASE_PASSWORD=your-secure-postgres-password-here REDIS_PASSWORD=your-redis-password-here MILVUS_USER=root MILVUS_PASSWORD=your-milvus-password-here # ============================================================================= # 6. Security & Authentication # ============================================================================= JWT_SECRET_KEY=your-jwt-secret-key-must-be-at-least-32-characters JWT_ALGORITHM=HS256 ACCESS_TOKEN_EXPIRE_MINUTES=60 REFRESH_TOKEN_EXPIRE_DAYS=7 # ============================================================================= # 7. Rate Limiting Configuration # ============================================================================= RATE_LIMIT_ENABLED=false RATE_LIMIT_LOGIN_PER_MINUTE=5 RATE_LIMIT_CONVERSATION_PER_MINUTE=30 RATE_LIMIT_GLOBAL_PER_MINUTE=100 # ============================================================================= # 8. Account Security Configuration # ============================================================================= LOGIN_MAX_FAILED_ATTEMPTS=5 LOGIN_LOCKOUT_MINUTES=15 MAX_MESSAGE_LENGTH=10000 MAX_IMAGE_SIZE_MB=5 PROMPT_GUARD_ENABLED=true