memoryops/.env.example at main · Quazmoz/memoryops · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
# MemoryOps Environment Variables
# Copy this file to .env and fill in the required values.
# Never commit .env to source control.

# ── Required ────────────────────────────────────────────────────────────────

# PostgreSQL connection string
DATABASE_URL=postgres://memoryops:memoryops@localhost:5432/memoryops

# Redis connection string
REDIS_URL=redis://localhost:6379

# Qdrant gRPC URL
QDRANT_URL=http://localhost:6334

# ── Application ─────────────────────────────────────────────────────────────

APP_HOST=0.0.0.0
APP_PORT=8080

# development | production
# When set to "production", the API will reject startup if app/workspace
# secrets are still set to the dev-placeholder value.
APP_ENV=development

# Path to TOML config file
CONFIG_PATH=config.toml

# Application encryption key for workspace skills and integration secrets.
# Required. Choose a long random string and keep it stable across restarts.
# APP_SECRET_KEY=<random-string>

# Workspace creation: the secret passed in the x-admin-token header when
# calling POST /v1/workspaces.  Required.  Choose a long random string.
# WORKSPACE_CREATION_SECRET=<random-string>

# Disable POST /v1/workspaces after bootstrap. The production compose overlay
# defaults this to false; local development defaults to true.
# WORKSPACE_CREATION_ENABLED=true

# Trusted reverse-proxy CIDR ranges for X-Forwarded-For processing.
# Only peers whose IP falls within these ranges are trusted to set XFF headers.
# Comma-separated CIDR notation.  Leave empty to trust nobody (direct IP only).
# Example for a local nginx proxy:
# TRUSTED_PROXY_CIDRS=127.0.0.1/32

# ── Audit log ────────────────────────────────────────────────────────────────
# Dedicated HMAC key for the tamper-evident audit hash chain. Optional but
# recommended for production. If unset, the chain falls back to APP_SECRET_KEY;
# if neither is set, hashing is disabled (rows are still written, seq/hash NULL).
# Rotating this key means rows written under the old key no longer verify, so
# rotate only with an archived export of the prior chain. See docs/audit.md.
# AUDIT_SIGNING_KEY=<random-string>

# Audit retention in days. UNSET or 0 = never prune (the safe default — audit
# history is preserved indefinitely). When set > 0, the scheduler deletes audit
# rows older than this each day. Recommended: 90–365 in production. Export or
# archive before enabling. See docs/audit.md.
# AUDIT_RETENTION_DAYS=365

# ── Webhook Secrets ──────────────────────────────────────────────────────────
# Webhook signing secrets are registered per workspace through:
# POST /v1/workspaces/{id}/integrations

# ── AI Providers ─────────────────────────────────────────────────────────────
# Uncomment and set only the keys for the providers you are using.
# See docs/PROVIDERS.md for full configuration reference.

# Required if embedding.provider = "openai" in config.toml
# OPENAI_API_KEY=<openai-api-key>

# Required if llm.provider = "anthropic" in config.toml
# ANTHROPIC_API_KEY=<anthropic-api-key>

# Required if llm.provider = "openrouter" in config.toml
# OPENROUTER_API_KEY=<openrouter-api-key>

# Required if llm.provider = "huggingface" in config.toml
# HF_API_KEY=<huggingface-api-key>

# Required if llm.provider = "gemini" in config.toml
# GEMINI_API_KEY=<gemini-api-key>

# ── MCP Server ───────────────────────────────────────────────────────────────
# stdio (default for CLI clients) | http (required for Docker / Open WebUI / VS Code)
MCP_TRANSPORT=stdio
MCP_PORT=3003

# ── Observability ────────────────────────────────────────────────────────────

# Log level: trace | debug | info | warn | error
RUST_LOG=info

# OTEL collector endpoint (optional — only used when telemetry.otel_exporter = "otlp" in config.toml)
# OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317

# ── Frontend ─────────────────────────────────────────────────────────────────

VITE_API_BASE_URL=/api

# Workspace UUID — used as dev fallback (npm run dev) only.
# In the Docker container the workspace is injected at runtime via
# MEMORYOPS_WORKSPACE_ID → /config.json (no need to rebuild the image).
# VITE_MEMORYOPS_WORKSPACE_ID=
# MEMORYOPS_WORKSPACE_ID=