tr-stack/sample.env at main · trunk-reporter/tr-stack · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
# =============================================================================
# tr-stack — Environment Configuration
# Copy to .env and fill in your values.
# =============================================================================

# REQUIRED — address Caddy (dashboard + API) listens on. There is no default;
# compose refuses to start until you choose one:
#   192.168.1.100  your server's LAN IP: reachable from your LAN only (typical)
#   127.0.0.1      this machine only
#   0.0.0.0        every interface, including a public one if the host has it.
#                  Set ADMIN_PASSWORD first (see below).
BIND_IP=

# MQTT broker host bind address (default 127.0.0.1). The bundled
# trunk-recorder doesn't need it; set it to your LAN/VPN IP only when
# trunk-recorders on other hosts publish to this broker. Login is always
# required either way.
# MQTT_BIND_IP=192.168.1.100

# Port Caddy listens on
HTTP_PORT=80

# Public-facing address (what browsers use — your server's IP or hostname)
# Examples: http://192.168.1.100  or  https://radio.example.com
SITE_ADDRESS=http://YOUR_SERVER_IP

# PostgreSQL credentials
# REQUIRED — there is no default password; compose refuses to start without
# one. Generate with: openssl rand -hex 24   (hex stays URL-safe in DATABASE_URL)
# Postgres only reads this when it first creates data/db. Upgrading an
# existing install? See README "Security defaults changed" before changing it.
POSTGRES_USER=trengine
POSTGRES_PASSWORD=
POSTGRES_DB=trengine

# MQTT login (REQUIRED — the broker rejects anonymous clients).
# Must match mosquitto/passwd and the "username"/"password" fields of the MQTT
# plugins in config.json. Generate with: openssl rand -hex 16
MQTT_USERNAME=trengine
MQTT_PASSWORD=

# Auth modes are derived from AUTH_TOKEN and ADMIN_PASSWORD:
# - open: leave both unset (default for trusted local/LAN installs)
# - token: set AUTH_TOKEN only; dashboard users enter the shared token
# - full: set ADMIN_PASSWORD; optional AUTH_TOKEN becomes a public read token
# For public-facing deployments, set ADMIN_PASSWORD and use API keys for uploads.
# AUTH_TOKEN=       # optional; generate with: openssl rand -base64 32
# ADMIN_PASSWORD=

# MQTT topics — must match your trunk-recorder plugin config
MQTT_TOPICS=tr/#

# Transcription provider
STT_PROVIDER=imbe
IMBE_ASR_URL=http://imbe-asr:8000

# IMBE-ASR model selection (downloads automatically from HuggingFace on first run)
# Options:
#   trunk-reporter/imbe-asr-base-512d-p25   — P25 fine-tuned, best for live radio (default)
#   trunk-reporter/imbe-asr-large-1024d     — 290M model, best accuracy on clean speech
#   trunk-reporter/imbe-asr-base-512d       — base model, good for edge/Pi deployment
IMBE_ASR_MODEL=trunk-reporter/imbe-asr-base-512d-p25
IMBE_ASR_DEVICE=cpu     # set to 'cuda' when using docker-compose.gpu.yml

# Raspberry Pi notes:
# - Use docker-compose.pi.yml override (sets cpu device + smaller model automatically)
# - The base-512d model is recommended for Pi — lower memory and faster inference
# - See README.md "Running on Raspberry Pi" section for full details

# Optional: point at trunk-recorder's audio dir for file-based ingest
# TR_AUDIO_DIR=/app/audio
# Path to libimbe.so on your host (required for IMBE decoding)
# LIBIMBE_PATH=/usr/local/lib/libimbe.so