2.0.0 Production-RC

.env.example

@@ -1,71 +1,28 @@
-# Public origin only: scheme + host, no path/query/fragment.
-BASE_URL=https://ai.trustednet.eu
+BASE_URL=http://localhost:8080
+OUTPUT_BASE_URL=http://localhost:8080
 PUBLIC_NAME=AI Usage Disclosure
 CONTACT_URL=https://ai.trustednet.eu
-SALES_URL=https://ai.trustednet.eu/product
 DEFAULT_LANGUAGE=de
-BULK_URL=http://localhost:8081
+TRUST_PROXY=false
 
-# Optional second container for batch rendering.
-BULK_MAX_URLS=500
-BULK_WORKERS=4
-BULK_REQUEST_TIMEOUT=8s
-
-# Proxy and logging. Enable proxy headers only with explicit trusted CIDRs.
-TRUST_PROXY=true
-TRUSTED_PROXY_CIDRS=
-LOG_CLIENT_IP=false
-ENABLE_HSTS=true
-
-# Prometheus is disabled by default. Enabling it requires a long bearer token;
-# METRICS_TOKEN_FILE is also supported. Keep the endpoint on an internal network.
-METRICS_ENABLED=false
-METRICS_TOKEN=
-
-# ---------------------------------------------------------------------------
-# Legal operator data. Fill with accurate information before public operation.
-# LEGAL_STRICT=true prevents startup while core legal/privacy fields are empty
-# or contain REPLACE_ME/CHANGEME/TODO.
-# ---------------------------------------------------------------------------
-LEGAL_STRICT=true
-LEGAL_NAME=REPLACE_ME
-LEGAL_ADDRESS=REPLACE_ME
-LEGAL_REPRESENTATIVE=
-LEGAL_EMAIL=REPLACE_ME
-LEGAL_PHONE=
-LEGAL_REGISTER=
-LEGAL_REGISTER_NUMBER=
-LEGAL_VAT_ID=
-
-# Only set these if the service contains journalistic-editorial content and
-# § 18(2) MStV applies.
-EDITORIAL_RESPONSIBLE_NAME=
-EDITORIAL_RESPONSIBLE_ADDRESS=
-
-DATA_PROTECTION_CONTACT=
-HOSTING_PROVIDER=REPLACE_ME
-HOSTING_ADDRESS=
-LOG_RETENTION=REPLACE_ME
-DATA_RECIPIENTS=
-THIRD_COUNTRY_TRANSFERS=
-SUPERVISORY_AUTHORITY_NAME=
-SUPERVISORY_AUTHORITY_URL=
-
-# One of: not_applicable, not_participating, participating.
-# Assess applicability under the VSBG; do not copy a status blindly.
-CONSUMER_DISPUTE_STATUS=REPLACE_ME
-CONSUMER_DISPUTE_BODY=
-CONSUMER_DISPUTE_URL=
-
-ACCESSIBILITY_CONTACT=
-ACCESSIBILITY_STATUS=
+# Runtime mode: full (UI + API), api (API without public product/generator pages), bulk.
+SERVICE_MODE=full
+API_ALLOWED_ORIGIN=*
 
 # Runtime license issued by the standalone Universal License Platform.
 # No private keys or configurable public keys belong in this application.
 LICENSE_TOKEN=
-LICENSE_INSTANCE_ID=
 LICENSE_MODE=offline
 LICENSE_SERVER_URL=https://license.trustednet.eu
+LICENSE_INSTANCE_ID=
 LICENSE_CACHE_FILE=/data/license-lease.json
 LICENSE_REFRESH_INTERVAL=15m
 LICENSE_REQUEST_TIMEOUT=5s
+REQUIRE_LICENSE=false
+WHITE_LABEL=false
+
+# Bulk API. The dedicated bulk image forces BULK_REQUIRE_API_KEY=true.
+BULK_MAX_ITEMS=500
+BULK_MAX_BODY_BYTES=4194304
+BULK_REQUIRE_API_KEY=false
+BULK_API_KEY=