.env.example

# medomni — environment template (variable names only; never commit values).
#
# See CLAUDE.md §2 for where each class of key lives. Historical note: the
# self-hosted serving deployment this template originally described is
# decommissioned; the GPU-pod variables below are retained for the archived
# runbooks and REPRO scripts.

# ---------------------------------------------------------------------------
# Hugging Face — read-only, gated-model access for Llama-3.1-Nemotron-70B base.
# Provision a NEW token at https://huggingface.co/settings/tokens scoped to
# this repo only. DO NOT reuse any prod-shared token.
# ---------------------------------------------------------------------------
HF_TOKEN=hf_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

# ---------------------------------------------------------------------------
# NGC registry — needed to pull NIM containers (nvcr.io/nim/...).
# Generate at https://ngc.nvidia.com/setup/api-key. Read-only registry creds,
# NOT a model API key. Provision new for this repo.
# ---------------------------------------------------------------------------
NGC_API_KEY=nvapi-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
NGC_CLI_API_KEY=${NGC_API_KEY}

# ---------------------------------------------------------------------------
# Brev SSH key — path to existing brev.pem on disk. Default location below.
# This is a path, not a secret value. The pem itself is not copied into env.
# ---------------------------------------------------------------------------
BREV_PEM_PATH=~/.brev/brev.pem

# ---------------------------------------------------------------------------
# Pod endpoints — set after Round-1 deploy. Local ssh-tunnel ports.
# These are NOT public URLs. NEVER point at *.thegoatnote.com or any DNS.
# Only ssh tunnels: ssh -L 8000:localhost:8000 warm-lavender-narwhal etc.
# ---------------------------------------------------------------------------
NEMOTRON_SERVE_URL=http://127.0.0.1:8000/v1
LLAMAGUARD_URL=http://127.0.0.1:8002/v1
NEMOTRON_REWARD_URL=http://127.0.0.1:8001
NV_EMBED_URL=http://127.0.0.1:8003/v1

# ---------------------------------------------------------------------------
# Web BFF (web/app/api/agent) access control — fail-closed.
# MEDOMNI_API_TOKEN: bearer token required by /api/agent when set. In
#   production builds the route returns 503 until this is configured
#   (operator step: set it in the deployment environment; value is a
#   secret — never commit it).
# MEDOMNI_DEV_OPEN=1: explicit local-development opt-out; only honored in
#   non-production builds.
# ---------------------------------------------------------------------------
MEDOMNI_API_TOKEN=
MEDOMNI_DEV_OPEN=