workbench/.env.example at main · corbitsdev/workbench · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
# cp .env.example .env
#
# Required: DATABASE_URL, HUB_DATA_DIR, CREDENTIAL_ENCRYPTION_KEY,
# PRINCIPAL_KEY_ENCRYPTION_KEY, SIDECAR_CREDENTIAL_ENCRYPTION_KEY.
# Everything else is optional and off when unset. The hub reads DB_HOST/DB_PORT/DB_USER/DB_PASSWORD/DB_NAME;
# `bun run dev` derives them from DATABASE_URL.

DATABASE_URL=postgres://localhost:5432/workbench

# Hub origin the web dev server proxies /api to.
BASE_URL=http://localhost:3000
# PORT=3000

# Durable hub state (git repos and assets). The default sits inside this
# work tree, which needs the opt-in below. Tests never use this path.
HUB_DATA_DIR=.data/hub
HUB_ALLOW_GIT_INSIDE_WORK_TREE=1

# Local admin that `bun run dev` signs up on a fresh hub.
# HUB_ADMIN_EMAIL=alice@example.com
# HUB_ADMIN_PASSWORD=password123

# 32 bytes hex each (openssl rand -hex 32). Generate your own outside a laptop.
CREDENTIAL_ENCRYPTION_KEY=0000000000000000000000000000000000000000000000000000000000000000
PRINCIPAL_KEY_ENCRYPTION_KEY=1111111111111111111111111111111111111111111111111111111111111111
# Kept separate from the hub's key so a sidecar compromise cannot read the hub's database.
SIDECAR_CREDENTIAL_ENCRYPTION_KEY=2222222222222222222222222222222222222222222222222222222222222222

# Max tool-package tarball the registry accepts. Default 10 MiB.
# HUB_MAX_TARBALL_BYTES=10485760

# Inference providers are connected from the UI, never from env. A local
# Ollama origin also lets `bun run dev` mount the memory plane against it.
# OLLAMA_BASE_URL=http://localhost:11434

# Memory plane (@corbits/memory). Run `bun run setup:memory` to fill these.
# EMBED_BASE_URL=http://localhost:11434
# EMBED_MODEL=nomic-embed-text
# EMBED_API_KEY=
# EMBED_TIMEOUT_MS=
# DB_POOL_MAX=8
# FTS_LANGUAGE=
# Optional reranker (a Text Embeddings Inference server); set both or neither.
# RERANK_BASE_URL=http://localhost:8081
# RERANK_MODEL=BAAI/bge-reranker-base
# RERANK_API_KEY=
# RERANK_MAX_DOC_CHARS=
# RERANK_TIMEOUT_MS=

# Adapters a sidecar loads for providers the stock runtime does not serve.
# A JSON list of {provider, specifier, export}; the specifier is imported at
# boot, so it is operator config only, never tenant or deploy data. These two
# entries are what "Continue with Codex" and "Continue with xAI" need in
# order to run inference once the sign-in has stored its credential.
SIDECAR_ADAPTER_MANIFEST=[{"provider":"codex","specifier":"@corbits/codex-provider","export":"createCodexResponsesAdapter"},{"provider":"xai","specifier":"@corbits/xai-provider","export":"createXaiResponsesAdapter"}]

# Sidecars run as child processes of the hub. Both optional.
# PROCESS_PROVISIONER_SIDECAR_ENTRY=
# PROCESS_PROVISIONER_RUNTIME=
# ws(s):// address sidecars dial back to.
# HUB_SIDECAR_WEBSOCKET_URL=