LANGFUSE_BASEURL=https://pxfuse.example.com
LANGFUSE_HOST=https://pxfuse.example.com
LANGFUSE_PUBLIC_KEY=pk-lf-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
LANGFUSE_SECRET_KEY=sk-lf-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

# 1. 保存访问 Token（600 权限，不进 shell history）
printf '%s' '<YOUR_ACCESS_TOKEN>' > ./pxfs-token && chmod 600 ./pxfs-token

# 2. 启动 sidecar 隧道（TLS + SCRAM，本地监听 127.0.0.1:12050）
docker run -d --name pxfs-sidecar \
  --network host --restart unless-stopped \
  --mount type=bind,src=$PWD/pxfs-token,dst=/etc/pxfs/token,readonly \
  -e PXFS_LISTEN=127.0.0.1:12050 \
  -e PXFS_TUNNEL_ENDPOINT='pxc-xxxxxxxxwn-pfs-pub.polarxpxfs.example.aliyuncs.com:12049' \
  -e PXFS_TOKEN_FILE=/etc/pxfs/token \
  reg.docker.alibaba-inc.com/apsaradb/pxfs-sidecar:latest

# 3. 挂载 NFS（见 mount 页签）

export PXS_URL='http://pxs-xxxxxxxx-pub.polarxsearch.rds.aliyuncs.com:9200'
export PXS_AUTH='<USERNAME>:<PASSWORD>'

# 连通性自检：返回集群名与版本即为地址和账号可用
curl -sS -u "$PXS_AUTH" "$PXS_URL"

# 建索引：开 kNN + 中文分词 + 4 维向量字段
# 集群至少 2 个数据节点，replicas=1 有地方放，health 能到 green
curl -sS -u "$PXS_AUTH" -XPUT "$PXS_URL/docs" \
  -H 'Content-Type: application/json' -d '{
  "settings": { "index": { "knn": true, "number_of_shards": 1, "number_of_replicas": 1 } },
  "mappings": { "properties": {
    "title":   { "type": "text", "analyzer": "ik_max_word" },
    "content": { "type": "text", "analyzer": "ik_max_word" },
    "embedding": {
      "type": "knn_vector", "dimension": 4,
      "method": { "name": "hnsw", "engine": "faiss", "space_type": "l2" }
    }
  } }
}'