Release v0.1.0-beta.2 — AI integration, schedule improvements, notification fixesFeature/ai agent

.agents/agent_assets_metadata.toml

@@ -0,0 +1,14 @@
+uploads = []
+generated = []
+
+[[outputs]]
+id = "OQ6_BDrejb-HuZQVwzvnR"
+uri = "file://.local/stack-analyse-polly.md"
+type = "text"
+title = "Stack-Analyse & Migrationsbericht: Polly → Canonical Stack"
+
+[[outputs]]
+id = "32j2umQnmIB66UTjwerbv"
+uri = "file://.local/polly-canonical-stack-abgleich.md"
+type = "text"
+title = "Polly vs. Canonical Stack — Release-Risikobewertung"

.env.example

@@ -1,5 +1,8 @@
 # Polly - Environment Variables Template
 # Copy this file to .env and fill in your values
+#
+# Variables prefixed with # are optional/commented out.
+# Remove the # to activate them.
 
 # ============================================
 # REQUIRED
@@ -8,71 +11,128 @@
 # PostgreSQL Database URL
 DATABASE_URL=postgresql://polly:your_password@localhost:5432/polly
 
-# Session secret (minimum 32 characters, use a random string)
+# Session secret (minimum 32 characters, use: openssl rand -base64 32)
 SESSION_SECRET=change-this-to-a-secure-random-string-at-least-32-chars
 
 # ============================================
-# APPLICATION URLs
+# APPLICATION URL
 # ============================================
 
-# Public URL of your application
+# Public URL of your application (used for OIDC redirects, email links, sharing)
 APP_URL=http://localhost:5000
-VITE_APP_URL=http://localhost:5000
+
+# Legacy aliases (supported for backward compatibility, use APP_URL instead):
+#   BASE_URL, VITE_APP_URL
 
 # ============================================
 # EMAIL (SMTP) - Optional
 # ============================================
 
 # SMTP Server Configuration
-SMTP_HOST=smtp.example.com
-SMTP_PORT=587
-SMTP_SECURE=false
-SMTP_USER=your-email@example.com
-SMTP_PASSWORD=your-email-password
+# SMTP_HOST=smtp.example.com
+# SMTP_PORT=587
+# SMTP_SECURE=false
+# SMTP_USER=your-email@example.com
+# SMTP_PASSWORD=your-email-password
+
+# Sender address and name for outgoing emails
+# FROM_EMAIL=noreply@yourdomain.com
+# FROM_NAME=Polly
 
-# From address for outgoing emails
-EMAIL_FROM=noreply@yourdomain.com
+# Legacy alias: EMAIL_FROM (same as FROM_EMAIL)
+# Legacy alias: SMTP_PASS (same as SMTP_PASSWORD)
 
 # ============================================
 # KEYCLOAK OIDC - Optional
 # ============================================
 
 # Enable enterprise SSO with Keycloak
-KEYCLOAK_REALM=your-realm
-KEYCLOAK_CLIENT_ID=polly
-KEYCLOAK_CLIENT_SECRET=your-client-secret
-KEYCLOAK_AUTH_SERVER_URL=https://keycloak.example.com
+# KEYCLOAK_REALM=your-realm
+# KEYCLOAK_CLIENT_ID=polly
+# KEYCLOAK_CLIENT_SECRET=your-client-secret
+# KEYCLOAK_AUTH_SERVER_URL=https://keycloak.example.com
+
+# Full OIDC issuer URL (auto-derived from REALM + AUTH_SERVER_URL if not set)
+# KEYCLOAK_ISSUER_URL=https://keycloak.example.com/realms/your-realm
+
+# Custom SSO button label (shown on login page instead of "Login with Keycloak")
+# SSO_BUTTON_LABEL=Kita Hub Login
+
+# Hide the local username+password login form (default: false = form visible)
+# Set to "true" to hide the local form when SSO is the primary login method
+# HIDE_LOGIN_FORM=true
+
+# Legacy alias: KEYCLOAK_URL (same as KEYCLOAK_AUTH_SERVER_URL)
+
+# ============================================
+# AI ASSISTANT - Optional (GWDG SAIA / OpenAI-compatible)
+# ============================================
+
+# AI API endpoint (OpenAI-compatible, e.g., GWDG SAIA)
+# AI_API_URL=https://saia.2.rahtiapp.fi/v1
+
+# AI API key — when set via ENV, AI chat is auto-enabled (no admin toggle needed)
+# AI_API_KEY=your-ai-api-key
+
+# Fallback AI API key (used when primary key hits rate limit HTTP 429)
+# AI_API_KEY_FALLBACK=your-fallback-ai-api-key
+
+# AI model name (default: llama-3.3-70b-instruct)
+# AI_MODEL=llama-3.3-70b-instruct
 
 # ============================================
 # SECURITY SCANNING - Optional
 # ============================================
 
 # ClamAV Antivirus (for file upload scanning)
-CLAMAV_ENABLED=false
-CLAMAV_HOST=localhost
-CLAMAV_PORT=3310
+# CLAMAV_ENABLED=false
+# CLAMAV_HOST=localhost
+# CLAMAV_PORT=3310
 
-# Pentest-Tools.com API (for vulnerability scanning)
-PENTEST_TOOLS_API_KEY=your-api-key-here
+# Pentest-Tools.com Pro API (for vulnerability scanning)
+# PENTEST_TOOLS_API_TOKEN=your-api-token-here
 
 # ============================================
-# DOCKER COMPOSE ONLY
+# DOCKER / INITIAL ADMIN - Optional
 # ============================================
 
-# PostgreSQL credentials (only used by docker-compose)
+# PostgreSQL credentials (only used by docker-compose bundled PostgreSQL)
 POSTGRES_USER=polly
 POSTGRES_PASSWORD=polly_secret
 POSTGRES_DB=polly
 
+# Initial admin account (created/updated on Docker start)
+# ADMIN_USERNAME=admin
+# ADMIN_EMAIL=admin@polly.local
+# ADMIN_PASSWORD=Admin123!
+
 # Seed demo data on first start (true/false)
-SEED_DEMO_DATA=false
+# SEED_DEMO_DATA=false
 
 # ============================================
 # ADVANCED
 # ============================================
 
 # Node environment (development, production)
-NODE_ENV=production
+# NODE_ENV=production
+
+# Server port (default: 5000)
+# PORT=5000
+
+# Enable SSL for database connections (e.g., managed PostgreSQL with TLS)
+# DATABASE_SSL=true
+
+# Force secure cookies even without HTTPS APP_URL (e.g., behind TLS-terminating proxy)
+# FORCE_HTTPS=true
+
+# Logging level: debug, info, warn, error (default: info in production, debug in development)
+# LOG_LEVEL=info
+
+# Chromium path for PDF export (auto-detected in Docker)
+# PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium
+
+# Disable WCAG default theme enforcement without branding.local.json
+# POLLY_WCAG_OVERRIDE=true
 
-# Port (default: 5000)
-PORT=5000
+# Custom header value for E2E test mode (default: polly-e2e-test-mode)
+# TEST_MODE_SECRET=polly-e2e-test-mode