grep -rn "ACCENT_" lib config rel
# 回显（仅一条）：
# lib/accent/integrations/execute/aws_s3.ex:44: "ACCENT_VERSION=..."}

# /etc/accent/accent.env
PORT=4000
DATABASE_URL=postgresql://accent:q1w2e3r4@127.0.0.1:5432/accent_prod
SECRET_KEY_BASE=<64 字节随机串>

# /etc/systemd/system/accent.service
[Service]
EnvironmentFile=/etc/accent/accent.env
ExecStart=/opt/accent-release/bin/accent start

/opt/accent-release/bin/accent eval \
  'IO.inspect(Application.get_env(:accent, Accent.Endpoint)[:http], label: "endpoint_http")'

/opt/accent-release/bin/accent eval \
 'IO.inspect(Application.get_env(:accent, Accent.Repo)[:pool_size], label: "db_pool_size");
  IO.inspect(Application.get_env(:accent, Accent.Repo)[:timeout], label: "db_timeout")'
# 回显：
# db_pool_size: 25
# db_timeout: 15000

# 测试实例监听 8080，宿主机 8134 转发到 8080
grep -E 'Running Accent|Access Accent' /var/log/accent.log
# 回显：
# [info] Running Accent.Endpoint with Bandit 1.13.0 at 0.0.0.0:8080 (http)
# [info] Access Accent.Endpoint at http://localhost:8134

curl -s -o /dev/null -w 'HTTP %{http_code}\n' http://127.0.0.1:8134/
# 回显：HTTP 200

grep -rn "FORCE_SSL" config lib rel
# 回显：空

force_ssl: get_uri_part(canonical_uri, :scheme) === "https"

location / {
    proxy_pass http://127.0.0.1:4000;
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";   # GraphQL Subscription/WebSocket
}

/opt/accent-release/bin/accent eval \
 'IO.inspect(Application.get_env(:accent, Accent.Mailer), label: "mailer")'
# 回显：
# mailer: [
#   mailer_from: "accent-noreply@example.com",
#   x_smtpapi_header: nil,
#   adapter: BambooSMTPAdapterWithTlsOptions,
#   server: "10.89.61.1",
#   port: "2525",
#   username: "accent",
#   password: "q1w2e3r4"
# ]

2026-10-27T18:55:58 ... >> '250 OK queued'
...
<a ... href="http://localhost:8133/">http://localhost:8133/</a>

curl -s -X POST http://127.0.0.1:8134/graphql \
  -H "Authorization: Bearer <API_TOKEN>" -H 'Content-Type: application/json' \
  -d '{"query":"{ authenticationProviders { id } }"}'
# 回显：{"data":{"authenticationProviders":[{"id":"dummy"}]}}

/opt/accent-release/bin/accent eval \
 'IO.inspect(Application.get_env(:accent, :restricted_domain), label: "restricted_domain")'
# 回显：restricted_domain: "example.com"

curl -s -X POST http://127.0.0.1:8134/graphql \
  -H "Authorization: Bearer <API_TOKEN>" -H 'Content-Type: application/json' \
  -d '{"query":"{ roles { slug } }"}'
# 回显：
# {"data":{"roles":[{"slug":"OWNER"},{"slug":"ADMIN"},{"slug":"DEVELOPER"},
#                   {"slug":"REVIEWER"},{"slug":"TRANSLATOR"}]}}

/opt/accent-release/bin/accent eval \
 'IO.inspect(Application.get_env(:accent, LanguageTool), label: "languagetool")'
# 回显：languagetool: [languages: ["fr", "en"]]

[info] LanguageTool is ready to spellcheck languages: fr, en (started in 2972ms)

[info] LanguageTool was not configured. Use LANGUAGE_TOOL_LANGUAGES environment variable to set a list of comma-separated languages short code.

grep -rn "OTEL_EXPORTER_OTLP_PROTOCOL" config lib rel
# 回显：空

config :logger, :console,
  format: "$time $metadata[$level] $message\n",
  level: :info,
  metadata: ~w(request_id current_user graphql_operation hook_service hook_url)a

grep -rn "LOG_LEVEL" config lib rel
# 回显：空

/opt/accent-release/bin/accent eval \
 'IO.inspect(Application.get_env(:logger, :console), label: "logger_console")'
# 回显：
# logger_console: [
#   format: "$time $metadata[$level] $message\n",
#   level: :info,
#   metadata: [:request_id, :current_user, :graphql_operation, :hook_service, :hook_url]
# ]

/opt/accent-release/bin/accent rpc 'Logger.configure(level: :debug)'

ERROR! the application :accent has a different value set for path [:debug_errors]
inside key Accent.Endpoint during runtime compared to compile time. Since this
application environment entry was marked as compile time, this difference can
lead to different behavior than expected:

  * Compile time value was set to: false
  * Runtime value was set to: true

To fix this error, you might:
  * Make the runtime value match the compile time one
  * Recompile your project.
  * Alternatively, you can disable this check...
Crash dump is being written to: erl_crash.dump...done

[info] Running Accent.Endpoint with Bandit 1.13.0 at 0.0.0.0:8080 (http)
[info] Access Accent.Endpoint at http://localhost:8134

# ---- 必需 ----
PORT=4000
DATABASE_URL=postgresql://accent:q1w2e3r4@127.0.0.1:5432/accent_prod
SECRET_KEY_BASE=<openssl rand -hex 64>
SIGNING_SALT=<固定随机串，勿改>
MACHINE_TRANSLATIONS_VAULT_KEY=<固定随机串，勿改>

# ---- 站点 ----
CANONICAL_URL=https://translate.example.com
DISABLE_CANONICAL_HOST_REDIRECT=1
# 不要设置 FORCE_SSL（v1.32.1 不读取）

# ---- 数据库调优 ----
DATABASE_POOL_SIZE=20
DATABASE_TIMEOUT=29000

# ---- 邮件 ----
MAILER_FROM=accent@example.com
SMTP_ADDRESS=10.0.0.25
SMTP_PORT=587
SMTP_USERNAME=accent
SMTP_PASSWORD=<口令>

# ---- 登录 ----
# 生产不要设置 DUMMY_LOGIN_ENABLED（注意：设为 0/false 也会开启）
OIDC_CLIENT_ID=<client-id>
OIDC_CLIENT_SECRET=<client-secret>
OIDC_ISSUER=https://idp.example.com/realms/main
RESTRICTED_PROJECT_CREATOR_EMAIL_DOMAIN=example.com

# ---- 可选 ----
LANGUAGE_TOOL_LANGUAGES=zh,en
SENTRY_DSN=<dsn>
OTEL_EXPORTER_OTLP_ENDPOINT=http://otel-collector:4318
TZDATA_AUTOUPDATE_DISABLED=1

systemctl restart accent
systemctl is-active accent                     # active
journalctl -u accent -n 20 --no-pager | grep -E 'Running Accent|LanguageTool'
curl -s -o /dev/null -w '%{http_code}\n' https://translate.example.com/   # 200