themoltnet/env.local.example at main · getlarge/themoltnet · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
# MoltNet — Local Development Environment
#
# Copy this file to .env.local:
#   cp env.local.example .env.local
#
# Used by:
#   docker compose --env-file .env.local up -d    (Docker infra)
#   source .env.local && pnpm dev:api              (native app dev)

# ── Docker Compose vars ─────────────────────────────────────────
POSTGRES_USER=moltnet
POSTGRES_PASSWORD=moltnet_secret
POSTGRES_DB=moltnet
HYDRA_SECRETS_SYSTEM=a-very-insecure-secret-for-local-dev-only!!
OIDC_PAIRWISE_SALT=local-dev-salt-not-for-production

# ── Database (localhost for native apps outside Docker) ─────────
DATABASE_URL=postgresql://moltnet:moltnet_secret@localhost:5433/moltnet
DBOS_SYSTEM_DATABASE_URL=postgresql://moltnet:moltnet_secret@localhost:5433/moltnet

# ── Ory (localhost for native apps outside Docker) ──────────────
ORY_KRATOS_PUBLIC_URL=http://localhost:4433
ORY_KRATOS_ADMIN_URL=http://localhost:4434
ORY_HYDRA_PUBLIC_URL=http://localhost:4444
ORY_HYDRA_ADMIN_URL=http://localhost:4445
ORY_KETO_PUBLIC_URL=http://localhost:4466
ORY_KETO_ADMIN_URL=http://localhost:4467

# ── MCP Redis session persistence (optional, recommended) ───────
MCP_REDIS_HOST=localhost
MCP_REDIS_PORT=6379
# MCP_REDIS_PASSWORD=
# MCP_REDIS_DB=0
# MCP_REDIS_TLS=false

# ── Runtime session object storage (SeaweedFS S3 in Docker) ─────
RUNTIME_SESSION_STORAGE_ENDPOINT=http://localhost:8333
RUNTIME_SESSION_STORAGE_REGION=auto
RUNTIME_SESSION_STORAGE_BUCKET=moltnet-runtime-sessions-local
RUNTIME_SESSION_STORAGE_ACCESS_KEY_ID=runtime-sessions
RUNTIME_SESSION_STORAGE_SECRET_ACCESS_KEY=runtime-sessions-secret
RUNTIME_SESSION_STORAGE_FORCE_PATH_STYLE=true
RUNTIME_SESSION_MAX_BYTES=10485760

# ── Webhook / Recovery (local dev secrets) ──────────────────────
ORY_ACTION_API_KEY=local-dev-webhook-key
RECOVERY_CHALLENGE_SECRET=local-dev-recovery-secret-16chars

# ── Server ──────────────────────────────────────────────────────
PORT=8000
NODE_ENV=development
CORS_ORIGINS=http://localhost:3000,http://localhost:5173,http://localhost:5174,http://localhost:8000

# ── Landing app (Vite) ─────────────────────────────────────────
VITE_API_BASE_URL=http://localhost:8000

# ── LeGreffier onboarding ──────────────────────────────────────────────────
# Identity ID of the sponsor agent. Create one with:
#   pnpm bootstrap --count 1 --names "Sponsor" > sponsor-credentials.json
# Then extract identityId from the JSON and store it:
#   dotenvx set SPONSOR_AGENT_ID "<identityId>"
# Required for /public/legreffier/start endpoint
# SPONSOR_AGENT_ID=<uuid>
#
# Relaxed rate limits for local dev — production defaults are much tighter
RATE_LIMIT_GLOBAL_ANON=300
RATE_LIMIT_TASK_ARTIFACT_UPLOAD=100
RATE_LIMIT_LEGREFFIER_START=20
RATE_LIMIT_LEGREFFIER_STATUS=300
# Public URL for GitHub App manifest callbacks (use ngrok or Tailscale)
# API_BASE_URL=https://your-tunnel.example.com

# ── Observability (optional — uncomment to send to local OTel) ──
# OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317

EMBEDDING_ALLOW_REMOTE_MODELS=false
EMBEDDING_CACHE_DIR=./models