open-dataroom/.env.local.example at main · dottaap-star/open-dataroom · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
# open-dataroom — environment variables
#
# Copy this file to `.env.local` and fill in the values, OR run `npm run setup`
# which writes both this file and `dataroom.config.ts` interactively.
# `.env.local` is gitignored; never commit secrets.

# ─── MongoDB ─────────────────────────────────────────────────────────────────
MONGODB_URI=mongodb+srv://USER:PASS@cluster.mongodb.net/dataroom
MONGODB_DB=open_dataroom               # informational only; the real db name comes from MONGODB_URI's path

# ─── JWT ─────────────────────────────────────────────────────────────────────
# JWT_SECRET should be at least 32 bytes of base64-encoded entropy.
# The wizard generates one for you if left blank.
JWT_SECRET=
JWT_ACCESS_EXPIRY=15m
JWT_REFRESH_EXPIRY=7d

# ─── Admin seed account ──────────────────────────────────────────────────────
# Created once on first boot; subsequent reboots leave the user alone.
# Wizard auto-generates ADMIN_PASSWORD if left blank.
ADMIN_EMAIL=admin@example.com
ADMIN_PASSWORD=

# ─── Cron auth ───────────────────────────────────────────────────────────────
# Used by /api/cron/sync. Vercel Cron sends it as `Authorization: Bearer …`.
# Wizard generates one if left blank.
CRON_SECRET=

# ─── AI chat provider keys (set the one(s) your dataroom.config.ts uses) ─────
# Gemini accepts either GEMINI_API_KEY or GOOGLE_GENERATIVE_AI_API_KEY.
GEMINI_API_KEY=
# GOOGLE_GENERATIVE_AI_API_KEY=
OPENAI_API_KEY=
ANTHROPIC_API_KEY=

# ─── Email (Gmail SMTP, or any nodemailer-compatible SMTP) ───────────────────
# Gmail requires 2-Step Verification + an app password — see docs/deploy.md.
# For production at scale, swap nodemailer for Postmark/SendGrid/Resend.
EMAIL_USER=hello@example.com
EMAIL_PASS=your-app-password

# ─── Google Drive (optional — leave unset to skip Drive sync entirely) ───────
GOOGLE_DRIVE_FOLDER_ID=
GOOGLE_SERVICE_ACCOUNT_EMAIL=
# Base64-encode the PEM private key from the service-account JSON:
#   cat key.json | jq -r .private_key | base64
GOOGLE_SERVICE_ACCOUNT_KEY=

# ─── AWS S3 (optional — falls back to Vercel ephemeral fs if unset) ──────────
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_REGION=us-east-1
S3_BUCKET_NAME=
# Optional CloudFront / Cloudflare CDN in front of S3. Leave blank to serve
# documents direct from S3.
CDN_URL=

# ─── App ─────────────────────────────────────────────────────────────────────
# Used in transactional emails and as Next.js metadataBase.
NEXT_PUBLIC_APP_URL=http://localhost:3000