.env.example

# Clawith Environment Variables
# Copy this file to .env and fill in the values

# Security
SECRET_KEY=change-me-in-production
JWT_SECRET_KEY=change-me-jwt-secret

# Database (auto-configured by setup.sh; override for custom setups)
# For local dev, ssl=disable is required to prevent asyncpg SSL negotiation hang
# DATABASE_URL=postgresql+asyncpg://clawith:clawith@localhost:5432/clawith?ssl=disable

# Redis
# REDIS_URL=redis://localhost:6379/0

# Feishu OAuth (optional, for SSO login)
FEISHU_APP_ID=
FEISHU_APP_SECRET=
FEISHU_REDIRECT_URI=http://localhost:3000/auth/feishu/callback

# Agent workspace data directory.
# Default: local host -> ~/.clawith/data/agents ; container runtime -> /data/agents
# AGENT_DATA_DIR=

# File storage backend. Use "s3" for S3-compatible object storage.
# When STORAGE_BACKEND=s3, local fallback lets old files under STORAGE_LOCAL_ROOT
# be read and copied into S3 on first access during migration.
# STORAGE_BACKEND=local
# STORAGE_LOCAL_ROOT=
# STORAGE_LOCAL_FALLBACK_ENABLED=true
# S3_BUCKET=
# S3_REGION=
# S3_ENDPOINT_URL=
# S3_ACCESS_KEY_ID=
# S3_SECRET_ACCESS_KEY=
# S3_PREFIX=agents
# S3_MAX_POOL_CONNECTIONS=50
# S3_WRITE_WORKERS=32

# Google Cloud Storage (S3-compatible API) — set these instead of MinIO values:
# STORAGE_BACKEND=s3
# S3_BUCKET=your-gcs-bucket-name
# S3_REGION=auto
# S3_ENDPOINT_URL=https://storage.googleapis.com
# S3_ACCESS_KEY_ID=your-hmac-access-key
# S3_SECRET_ACCESS_KEY=your-hmac-secret
# S3_PREFIX=agents

# Local MinIO settings used by docker-compose.multi-instance.yml.
# Change the password before exposing MinIO outside local development.
MINIO_ROOT_USER=clawith
MINIO_ROOT_PASSWORD=clawith-minio-secret
MINIO_BUCKET=clawith
MINIO_API_PORT=9000
MINIO_CONSOLE_PORT=9001
API_PORT=8000

# Jina AI API key (for jina_search and jina_read tools — get one at https://jina.ai)
# Without a key, the tools still work but with lower rate limits
JINA_API_KEY=

# Exa API key (for exa_search tool and web_search Exa engine — get one at https://exa.ai)
EXA_API_KEY=

# Public app URL used in user-facing links, such as password reset emails.
# Leave empty for auto-discovery from the browser request.
# Set explicitly for production (e.g. https://your-domain.com) — required for
# background tasks like webhook URLs and email links that have no request context.
PUBLIC_BASE_URL=


# Password reset token lifetime in minutes
PASSWORD_RESET_TOKEN_EXPIRE_MINUTES=30

# Frontend port (default: 3008)
# FRONTEND_PORT=3008

# API upstream for nginx proxy (default: backend:8000)
# API_UPSTREAM=backend:8000

# Python pip index URL (for China mirrors)
# CLAWITH_PIP_INDEX_URL=https://pypi.tuna.tsinghua.edu.cn/simple
# CLAWITH_PIP_TRUSTED_HOST=pypi.tuna.tsinghua.edu.cn