49 lines
2.2 KiB
Bash
49 lines
2.2 KiB
Bash
 
|
# =============================================================================
|
||
|
|
# shared-memory — example environment file
|
||
|
|
# Copy to `.env` and fill in real values. Never commit `.env`.
|
||
|
|
# =============================================================================
|
||
|
|
|
||
|
|
# -----------------------------------------------------------------------------
|
||
|
|
# Public URL the app is reached at.
|
||
|
|
# Used for OIDC redirect URIs, MCP discovery metadata, and the Caddy site name.
|
||
|
|
# -----------------------------------------------------------------------------
|
||
|
|
PUBLIC_URL=https://memory.example.com
|
||
|
|
|
||
|
|
# -----------------------------------------------------------------------------
|
||
|
|
# Authentik OIDC
|
||
|
|
# Create two Applications in Authentik (one for the Web UI, one for the MCP
|
||
|
|
# resource server). See README.md for the exact provider settings.
|
||
|
|
# -----------------------------------------------------------------------------
|
||
|
|
OIDC_ISSUER=https://auth.example.com/application/o/shared-memory/
|
||
|
|
OIDC_CLIENT_ID_WEB=replace-me
|
||
|
|
OIDC_CLIENT_SECRET_WEB=replace-me
|
||
|
|
OIDC_CLIENT_ID_MCP=replace-me
|
||
|
|
OIDC_AUDIENCE=shared-memory
|
||
|
|
|
||
|
|
# -----------------------------------------------------------------------------
|
||
|
|
# Database (Postgres 16 + pgvector)
|
||
|
|
# Default values match the docker-compose `db` service.
|
||
|
|
# -----------------------------------------------------------------------------
|
||
|
|
POSTGRES_USER=memory
|
||
|
|
POSTGRES_PASSWORD=replace-me-with-a-strong-password
|
||
|
|
POSTGRES_DB=memory
|
||
|
|
DATABASE_URL=postgres://memory:replace-me-with-a-strong-password@db:5432/memory
|
||
|
|
|
||
|
|
# -----------------------------------------------------------------------------
|
||
|
|
# Embedder sidecar (added in Phase 2)
|
||
|
|
# -----------------------------------------------------------------------------
|
||
|
|
EMBEDDER_URL=http://embedder:8080
|
||
|
|
EMBEDDING_MODEL=Xenova/bge-small-en-v1.5
|
||
|
|
EMBEDDING_DIM=384
|
||
|
|
|
||
|
|
# -----------------------------------------------------------------------------
|
||
|
|
# NextAuth session signing — generate with: openssl rand -base64 32
|
||
|
|
# -----------------------------------------------------------------------------
|
||
|
|
NEXTAUTH_SECRET=replace-me-with-32-bytes-of-random
|
||
|
|
|
||
|
|
# -----------------------------------------------------------------------------
|
||
|
|
# App
|
||
|
|
# -----------------------------------------------------------------------------
|
||
|
|
LOG_LEVEL=info
|
||
|
|
NODE_ENV=production
|