The current version is #ident "@(#)$Format:LocalFoodAI_lanfr144:Env_Configuration.md:%an:%ae:%ad:%cn:%ce:%cd:%H:%D:%N$"


# Local Food AI - Environment Variables Configuration Runbook

This runbook catalogs every configuration key in the `.env` file, explaining its functional purpose, dependency context, and providing fillable fields for custom deployment setups.

---

## 1. Network & System Mode Configuration

| Parameter | Purpose & Description | Example Value | Your Custom Value |
| :--- | :--- | :--- | :--- |
| `NETWORK_MODE` | Controls external request checks. Set to `server` to enable telemetry alerts and database triggers, or `local` for offline development/standalone fallback. | `server` | `____________________` |
| `LLM_MODEL` | The local Large Language Model loaded into Ollama. Default is `llama3.2:3b` for quantized local inference. | `llama3.2:3b` | `____________________` |

---

## 2. Database Credentials (MySQL)

These credentials configure standard user authentication permissions on the vertical partitions.

| Parameter | Purpose & Description | Example Value | Your Custom Value |
| :--- | :--- | :--- | :--- |
| `MYSQL_ROOT_PASSWORD` | MySQL root administrative account access password. | `your_mysql_root_pass` | `____________________` |
| `DB_READER_PASS` | Password for the low-privilege `food_reader` database account. | `your_db_reader_pass` | `____________________` |
| `DB_LOADER_PASS` | Password for the `food_loader` account executing bulk CSV imports. | `your_db_loader_pass` | `____________________` |
| `DB_APP_AUTH_PASS` | Password for the `food_app_auth` credential checker role. | `your_db_auth_pass` | `____________________` |
| `MYSQL_ZABBIX_PASSWORD` | Password for the Zabbix DB user connection profile. | `your_mysql_zabbix_pass` | `____________________` |

---

## 3. Zabbix & SNMPv3 Configuration

Configures the monitoring server APIs and SNMPv3 security parameters.

| Parameter | Purpose & Description | Example Value | Your Custom Value |
| :--- | :--- | :--- | :--- |
| `ZABBIX_URL` | Endpoint URL for Zabbix API script queries. | `http://your_zabbix_host:8081` | `____________________` |
| `ZABBIX_USER` | Admin dashboard username for API provisioning. | `your_zabbix_user` | `____________________` |
| `ZABBIX_PASS` | Zabbix admin dashboard password. | `your_zabbix_pass` | `____________________` |
| `ZABBIX_SNMP_USER` | Secure SNMPv3 routing user identifier. | `your_snmp_user` | `____________________` |
| `ZABBIX_SNMP_AUTHKEY` | SNMPv3 SHA authentication key (minimum 8 characters). | `your_snmp_authkey` | `____________________` |
| `ZABBIX_SNMP_PRIVKEY` | SNMPv3 AES encryption key (minimum 8 characters). | `your_snmp_privkey` | `____________________` |
| `DISCORD_WEBHOOK` | External webhook URL for automated alerts. | `https://discord.com/api/webhooks/your_webhook_id` | `____________________` |

---

## 4. Alert Mail Gateways & PM Integration

| Parameter | Purpose & Description | Example Value | Your Custom Value |
| :--- | :--- | :--- | :--- |
| `EMAIL_USER` | SMTP server username for password recovery alerts. | `your_email_user@example.com` | `____________________` |
| `EMAIL_PASS` | SMTP server authentication password. | `your_email_password` | `____________________` |
| `TAIGA_URL` | Endpoint path for the Taiga Agile Kanban board server. | `http://your_taiga_host/taiga` | `____________________` |
| `TAIGA_USER` | API authentication account username. | `your_taiga_user` | `____________________` |
| `TAIGA_PASS` | Password for the API sync user. | `your_taiga_pass` | `____________________` |

---

## 5. VM Server Remote Deployments

Credentials required to manage SSH keys and remote container processes from the client.

| Parameter | Purpose & Description | Example Value | Your Custom Value |
| :--- | :--- | :--- | :--- |
| `SERVER_HOST` | Remote server IP address (Server A hypervisor). | `your_server_ip` | `____________________` |
| `SERVER_USER` | SSH login username for command line deployments. | `your_ssh_user` | `____________________` |
| `SERVER_PASS` | SSH login password for VM operations. | `your_ssh_pass` | `____________________` |