RepoMentor/.env.example at main · JasonTM17/RepoMentor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
# RepoMentor environment variable names. Keep local values in an untracked .env file.

# Application
APP_PORT=
WEB_PORT=
API_PREFIX=
WEB_ORIGIN=
# Comma-separated absolute browser origins. Development/test use bounded
# localhost defaults; production must provide an explicit non-wildcard list.
CORS_ORIGINS=
LOG_LEVEL=

# Local Compose application ports. Choose unused localhost ports.
API_HOST_PORT=
WEB_HOST_PORT=

# Local PostgreSQL and Redis infrastructure. Keep values in the untracked .env file.
# Both host ports are bound to 127.0.0.1 by docker-compose.yml; choose unused ports.
POSTGRES_HOST_PORT=
REDIS_HOST_PORT=
POSTGRES_DB=
POSTGRES_USER=
POSTGRES_PASSWORD=
REDIS_PASSWORD=

# Compose API connection strings. Use service DNS names, not localhost, and
# URL-encode credential components before placing them in these URLs.
# DATABASE_URL=postgresql://<user>:<url-encoded-password>@postgres:5432/<db>
# REDIS_URL=redis://:<url-encoded-password>@redis:6379/0
DATABASE_URL=
REDIS_URL=

# Required at web image build time; use http://localhost:<API_HOST_PORT> so
# browser requests reach the host-published API port, not the internal api DNS name.
NEXT_PUBLIC_API_ORIGIN=

# Luna code-review provider (server-only; never expose the API key to clients).
# This is a fixed, deployment-owned HTTPS allowlisted endpoint; do not replace it
# with an arbitrary provider or host.
LUNA_API_KEY=
LUNA_API_BASE_URL=https://api.openai.com/v1

# Optional configured AI cost estimates (server-only; no provider price default).
# Keep all four lines commented/unset to keep estimates unavailable; an empty
# assignment is not an unset value. To enable the estimate, set all four
# together. Each rate is a non-negative integer number of USD micros per million
# tokens; the version and rates are deployment-owned and versioned. Never place
# real values in this template or expose them to web.
# AI_PRICING_VERSION=
# AI_INPUT_USD_MICROS_PER_MILLION_TOKENS=
# AI_CACHED_INPUT_USD_MICROS_PER_MILLION_TOKENS=
# AI_OUTPUT_USD_MICROS_PER_MILLION_TOKENS=

# Optional RAG suggestions (server-side, disabled until governance gates pass)
RAG_SUGGESTIONS_ENABLED=
RAG_SUGGESTIONS_PROVIDER=
RAG_SUGGESTIONS_MODEL=
RAG_SUGGESTIONS_ENDPOINT=
RAG_SUGGESTIONS_TIMEOUT_MS=
RAG_SUGGESTIONS_MAX_CONCURRENCY=

# Authentication and cookies
JWT_ACCESS_SECRET=
JWT_REFRESH_SECRET=
JWT_ACCESS_EXPIRES_IN=
JWT_REFRESH_EXPIRES_IN=
COOKIE_SECURE=
COOKIE_SAME_SITE=

# Local development seed only. Leave blank unless explicitly seeding a non-production database.
SEED_USER_EMAIL=
SEED_USER_PASSWORD=
SEED_USER_DISPLAY_NAME=

# Review quota defaults
# Server-only quota admission fingerprint secret. Never expose this value to
# clients or commit a real secret. Deploy a non-empty UTF-8 secret with at
# least 32 bytes of entropy (maximum 4096 UTF-8 bytes); keep this placeholder empty.
QUOTA_ADMISSION_FINGERPRINT_SECRET=
GUEST_QUICK_REVIEWS_PER_DAY=
USER_QUICK_REVIEWS_PER_DAY=
USER_STANDARD_REVIEWS_PER_DAY=
USER_DEEP_REVIEWS_PER_DAY=