Kyrozen/.env.example at main · EvanProgramming/Kyrozen · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
# Kyrozen Beta Configuration
# Copy this file to .env and fill in your values.
# DO NOT commit .env to version control.

# -----------------------------------------------------------------------------
# Supabase Configuration
# -----------------------------------------------------------------------------
# Supabase project URL (without /rest/v1/ path).
# Example: https://<project-ref>.supabase.co
SUPABASE_URL=https://sjesqiocedolckqjfrls.supabase.co

# Supabase anon key (used by frontend for auth).
SUPABASE_ANON_KEY=your-supabase-anon-key

# Supabase service role key (used by backend; keep secret).
SUPABASE_SERVICE_ROLE_KEY=your-supabase-service-role-key

# JWT secret used to validate Supabase Auth tokens.
# In Supabase Cloud this is the JWT Secret from Project Settings > API.
SUPABASE_JWT_SECRET=your-supabase-jwt-secret

# -----------------------------------------------------------------------------
# AI Model Configuration
# -----------------------------------------------------------------------------
# At least one provider is required.
DEEPSEEK_API_KEY=
OPENAI_API_KEY=
ANTHROPIC_API_KEY=
GOOGLE_API_KEY=
OLLAMA_BASE_URL=

# Default model (optional)
KYROZEN_MODEL=deepseek/deepseek-chat

# -----------------------------------------------------------------------------
# Kyrozen Application Configuration
# -----------------------------------------------------------------------------
# Database backend: sqlite | postgres | supabase
KYROZEN_DB_BACKEND=sqlite

# SQLite path (used when KYROZEN_DB_BACKEND=sqlite)
KYROZEN_DB_PATH=./workspace/kyrozen.db

# PostgreSQL DSN (used when KYROZEN_DB_BACKEND=postgres)
# Example: postgresql://kyrozen:your-password@localhost:5432/kyrozen
KYROZEN_POSTGRES_DSN=

# Self-hosted PostgreSQL credentials (used by docker-compose.selfhosted.yml)
POSTGRES_DB=kyrozen
POSTGRES_USER=kyrozen
POSTGRES_PASSWORD=change-me-in-production

# Workspace root for project files
KYROZEN_WORKSPACE_ROOT=./workspace

# Permission mode: strict | permissive
KYROZEN_PERMISSION_MODE=strict

# Log level: DEBUG | INFO | WARNING | ERROR
KYROZEN_LOG_LEVEL=INFO

# API host and port (inside container)
KYROZEN_HOST=0.0.0.0
KYROZEN_PORT=8000

# Secret key for FastAPI internal signing (not used for Supabase JWT).
# Generate with: openssl rand -hex 32
KYROZEN_SECRET_KEY=change-me-in-production

# -----------------------------------------------------------------------------
# Web Search (optional)
# -----------------------------------------------------------------------------
TAVILY_API_KEY=
SERPER_API_KEY=

# -----------------------------------------------------------------------------
# GitHub Integration (optional)
# -----------------------------------------------------------------------------
GITHUB_TOKEN=

# -----------------------------------------------------------------------------
# Beta Settings
# -----------------------------------------------------------------------------
# Set to true to require invite code for registration
KYROZEN_BETA_INVITE_ONLY=false

# CORS origins (comma separated)
# For desktop client dev mode include http://localhost:5173.
# For packaged desktop client the origin is "null" (Electron file://), so also add null.
# For self-hosted web access add https://your-domain.com (or http://<server-ip>:5173
# when running without a domain). The desktop client sends Origin "null", so keep
# `null` in the list. Credentials are also reachable directly by IP over plain
# HTTP from the desktop client via the KYROZEN_DESKTOP_SERVER_URL env var.
KYROZEN_CORS_ORIGINS=http://127.0.0.1:5173,http://localhost:5173,null

# -----------------------------------------------------------------------------
# Security
# -----------------------------------------------------------------------------
# Request rate limit per minute per IP (0 = disabled)
KYROZEN_RATE_LIMIT_PER_MINUTE=60

# Max request body size in bytes (default 10 MB)
KYROZEN_MAX_BODY_SIZE=10485760

# -----------------------------------------------------------------------------
# Cloudflare Tunnel (optional, for self-hosted deployments without public 80/443)
# -----------------------------------------------------------------------------
# Create a tunnel in Cloudflare Zero Trust (Networks > Tunnels) and paste the
# token here. See docs/CLOUDFLARE_TUNNEL.md for the full setup guide.
TUNNEL_TOKEN=