FilesExpand file tree

 fix/security-webhook-hmac

/

.env.example

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

43 lines (36 loc) · 3.38 KB

 fix/security-webhook-hmac

/

.env.example

Top

File metadata and controls

• Code
• Blame

43 lines (36 loc) · 3.38 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

# Database (Required)

DATABASE_URL="postgresql://postgres:your_password@localhost:5432/simstudio"

# Authentication (Required unless DISABLE_AUTH=true)

BETTER_AUTH_SECRET=your_secret_key # Use `openssl rand -hex 32` to generate, or visit https://www.better-auth.com/docs/installation

BETTER_AUTH_URL=http://localhost:3000

# Authentication Bypass (Optional - for self-hosted deployments behind private networks)

# DISABLE_AUTH=true # Uncomment to bypass authentication entirely. Creates an anonymous session for all requests.

# NextJS (Required)

NEXT_PUBLIC_APP_URL=http://localhost:3000

# INTERNAL_API_BASE_URL=http://sim-app.default.svc.cluster.local:3000 # Optional: internal URL for server-side /api self-calls; defaults to NEXT_PUBLIC_APP_URL

# TRUSTED_ORIGINS=https://www.example.com,https://app.example.com # Optional: comma-separated additional public origins to trust for auth (apex+www, alias domains). Merged into Better Auth trustedOrigins.

# Security (Required)

ENCRYPTION_KEY=your_encryption_key # Use `openssl rand -hex 32` to generate, used to encrypt environment variables

INTERNAL_API_SECRET=your_internal_api_secret # Use `openssl rand -hex 32` to generate, used to encrypt internal api routes

API_ENCRYPTION_KEY=your_api_encryption_key # Use `openssl rand -hex 32` to generate, used to encrypt api keys

# Email Provider (Optional)

# RESEND_API_KEY= # Uncomment and add your key from https://resend.com to send actual emails

# If left commented out, emails will be logged to console instead

# Local AI Models (Optional)

# OLLAMA_URL=http://localhost:11434 # URL for local Ollama server - uncomment if using local models

# VLLM_BASE_URL=http://localhost:8000 # Base URL for your self-hosted vLLM (OpenAI-compatible)

# VLLM_API_KEY= # Optional bearer token if your vLLM instance requires auth

# FIREWORKS_API_KEY= # Optional Fireworks AI API key for model listing

# NEXT_PUBLIC_BEDROCK_DEFAULT_CREDENTIALS=true # Set when using AWS default credential chain (IAM roles, ECS task roles, IRSA). Hides credential fields in Agent block UI.

# AZURE_OPENAI_ENDPOINT= # Azure OpenAI endpoint (hides field in UI when set alongside NEXT_PUBLIC_AZURE_CONFIGURED)

# AZURE_OPENAI_API_KEY= # Azure OpenAI API key

# AZURE_OPENAI_API_VERSION= # Azure OpenAI API version

# AZURE_ANTHROPIC_ENDPOINT= # Azure Anthropic endpoint (AI Foundry)

# AZURE_ANTHROPIC_API_KEY= # Azure Anthropic API key

# AZURE_ANTHROPIC_API_VERSION= # Azure Anthropic API version (e.g., 2023-06-01)

# NEXT_PUBLIC_AZURE_CONFIGURED=true # Set when Azure credentials are pre-configured above. Hides endpoint/key/version fields in Agent block UI.

# COHERE_API_KEY= # Cohere API key for the Knowledge block reranker (rerank-v4.0-pro/-fast, rerank-v3.5). Alternatively set COHERE_API_KEY_1/2/3 for rotation.

# NEXT_PUBLIC_COHERE_CONFIGURED=true # Set when COHERE_API_KEY (or rotation keys) are pre-configured above. Hides the Cohere API Key field on the Knowledge block UI.

# Admin API (Optional - for self-hosted GitOps)

# ADMIN_API_KEY= # Use `openssl rand -hex 32` to generate. Enables admin API for workflow export/import.

# Usage: curl -H "x-admin-key: your_key" https://your-instance/api/v1/admin/workspaces