External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

docs(env): show the real default for SNAPOTTER_ALLOW_MODEL_DOWNLOAD (#712)

Browse Source 
.env.example shipped this as 1 while the code defaults to 0 (offline_guard.py and
bridge.ts both fail closed) and the security guide states that runtime model
downloads are disabled by default. Every other reference in the repo uses 0.

No runtime behaviour changes: no compose file or Dockerfile sets the variable, so
the code default already governed real deployments.
This commit is contained in:
SnapOtter
2026-08-02 12:03:57 +08:00
committed by GitHub
parent 5ffede05ef
commit e964745f5c
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.env.example
+6 -4
View File
@@ -50,10 +50,12 @@ LIBREOFFICE_TIMEOUT_S=120
# PDFCPU_PATH=
# SNAPOTTER_HW_ACCEL= # nvenc|vaapi: hardware encoder family (default software)
# AI tools fetch missing model files automatically (public model weights only,
# never user data). Set 0 for airgapped deployments to guarantee zero outbound
# fetches; missing models then produce actionable errors instead of downloads.
SNAPOTTER_ALLOW_MODEL_DOWNLOAD=1
# Runtime fallback downloads for AI model files, off by default. Bundle installs
# are unaffected: they verify a pinned sha256 either way. Set 1 to let a tool
# fetch a model file that is missing from its bundle (public model weights only,
# never user data) instead of failing with an actionable error. Those fallback
# fetches are not digest-checked, and some come from third-party model hosts.
SNAPOTTER_ALLOW_MODEL_DOWNLOAD=0
SESSION_DURATION_HOURS=168
LOGIN_ATTEMPT_LIMIT=10