.env.example

RUST_VERSION=1.95
PYTHON_VERSION=3.12
IMAGE_TAG=latest
# Server-local IANA timezone used for statistics day boundaries.
TZ=America/New_York
# Existing network hostname that coworkers use to reach this machine.
LABEL_CHECK_HOSTNAME=replace-with-machine-hostname
PIPELINE_MAX_WORKERS=8
PIPELINE_MAX_THUMBNAIL_DIMENSION=4096
LOGIN_PAIR_ATTEMPT_LIMIT=5
LOGIN_ACCOUNT_ATTEMPT_LIMIT=10
LOGIN_RATE_WINDOW_SECONDS=900
# Set false only when developing over plain localhost HTTP outside Compose.
SESSION_COOKIE_SECURE=true
# Inside-container allowlists separated by colon. Input/output paths submitted to
# pipeline UI or API must resolve beneath these roots.
PIPELINE_INPUT_ROOTS=/data/gt450-images:/data/label-check-batches
PIPELINE_OUTPUT_ROOTS=/data/label-check-batches

# Generate long random values. SECRET_KEY must be at least 32 characters and
# ADMIN_DEFAULT_PASSWORD at least 12. Placeholder values are rejected. Do not
# commit real values.
SECRET_KEY=replace-with-a-long-random-value
ADMIN_DEFAULT_PASSWORD=replace-before-first-start

# Docker's Linux VM mounts the GT450 SMB share directly. Use a dedicated,
# read-only account. Its password must not contain a comma.
GT450_SMB_SERVER=replace-with-server-name
GT450_SMB_ADDRESS=replace-with-server-address
GT450_SMB_SHARE=replace-with-share-name
GT450_SMB_SUBDIR=GT450_Images
GT450_SMB_USERNAME=replace-with-read-only-smb-user
GT450_SMB_PASSWORD=replace-with-smb-password
GT450_SMB_DOMAIN=replace-with-ad-domain
GT450_SMB_VERSION=3.1.1
GT450_IMAGES_HOST_PREFIX=\\chp.clarian.org\app\Philips_Slide_Images\GT450_images

# Docker Desktop must have permission to share each local Windows path below.
SCANNER_INVENTORIES_HOST=D:\scanner_inventories
LABEL_CHECK_BATCHES_HOST=D:\label_check_batches
LABEL_CHECK_BATCHES_HOST_PREFIX=D:\label_check_batches
IMAGE_STAGING_HOST=D:\image_staging
COPATH_CLONE_HOST=D:\copath_clone
LABEL_CHECK_STATE_HOST=D:\label_check_batches\state
BATCH_CATALOG_RECONCILE_SECONDS=60
TQ_HOME_HOST=D:\label-check-tq
SSH_HOME_HOST=D:\label-check-ssh
COPATH_QUERY_MODE=windows_queue
COPATH_QUERY_QUEUE=/data/state/copath-query
COPATH_QUERY_TIMEOUT_SECONDS=300

# Used by the manually started Windows worker. The password is not stored here.
COPATH_CONNECTION_STRING_FILE_HOST=D:\label-check-secrets\copath-connection-string.txt

# Only required with: docker compose -f compose.yaml -f compose.direct.yaml up -d
KRB5_CONFIG_HOST=D:\label-check-kerberos\krb5.conf