# fs-user-app / backend secrets env template
# Copy to env.secrets (do not commit). Load before start.
# IDEA: Run Configuration -> Environment variables
# PowerShell: . .\scripts\load-env-secrets.ps1
# Fill real values on the server only.

# Huawei cloud OBS/VOD/CDN
HUAWEI_CLOUD_AK=
HUAWEI_CLOUD_SK=

# Tencent COS
TENCENT_COS_SECRET_ID=
TENCENT_COS_SECRET_KEY=

# Tencent SMS
SMS_TENCENT_SECRET_ID=
SMS_TENCENT_SECRET_KEY=

# Baidu AI
BAIDU_AI_CLIENT_ID=
BAIDU_AI_CLIENT_SECRET=
BAIDU_AI_SECRET_KEY=
BAIDU_AI_PLUGINS=

# H-17 Aliyun market ID card OCR（源码禁止硬编码；上线后请在控制台轮换 AppCode）
ALIYUN_IDCARD_APP_CODE=
# optional override
# ALIYUN_IDCARD_OCR_URL=https://idcardside.market.alicloudapi.com/idcard_ocr

# Feishu token AES (16 bytes)
FEISHU_TOKEN_AES_KEY=

# Tulin sync
TULIN_SYNC_SECRET_KEY=
TULIN_SYNC_PHARMACY_ID=
TULIN_SYNC_CORP_ID=

# Volcengine HSY
HSY_ACCESS_KEY=
HSY_SECRET_KEY=
HSY_ROLE_ACCESS_KEY=
HSY_ROLE_SECRET_KEY=

# Admin JWT token.secret（H-09：必填，≥32位强随机，无默认值）
TOKEN_SECRET=

# Druid console (disabled in hdt yml; set if re-enabled)
DRUID_LOGIN_USERNAME=
DRUID_LOGIN_PASSWORD=

# ===== HDT =====
HDT_REDIS_HOST=
HDT_REDIS_PASSWORD=
HDT_MYSQL_PASSWORD=
HDT_SOP_MYSQL_PASSWORD=
HDT_EASYCALL_MYSQL_PASSWORD=
HDT_ROCKETMQ_SECRET_KEY=
HDT_OPENIM_SECRET=
HDT_WX_MINIAPP_SECRET_1=
HDT_WX_MINIAPP_SECRET_2=
HDT_WX_MINIAPP_TOKEN=
HDT_WX_MINIAPP_AES_KEY=
HDT_WX_CP_SECRET=
HDT_WX_CP_TOKEN=
HDT_WX_CP_AES_KEY=
HDT_WX_PAY_MCH_KEY=
HDT_WX_MP_SECRET=
HDT_WX_MP_TOKEN=
HDT_WX_MP_AES_KEY=
HDT_WX_OPEN_SECRET=
HDT_AIFABU_APP_KEY=
HDT_WATCH_PASSWORD1=
HDT_WATCH_PASSWORD2=
HDT_WATCH_PASSWORD3=
HDT_APP_JWT_SECRET=
HDT_NUONUO_SECRET=
HDT_TENCENT_COS_SECRET_ID=
HDT_TENCENT_COS_SECRET_KEY=
HDT_FEISHU_APP_SECRET=