verifywise/.env.dev at master · MuhammadKhalilzadeh/verifywise · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
# Common Variables
# NOTE: Please do not change the BACKEND_PORT
BACKEND_PORT=3000
BACKEND_URL=http://localhost:3000
FRONTEND_PORT=5173
FRONTEND_URL=http://localhost:5173
HOST=localhost
LLM_EVALS_PORT=8000
NODE_ENV=development

MULTI_TENANCY_ENABLED=false

AI_GATEWAY_URL=http://127.0.0.1:8100
# Generated using: openssl rand -hex 32
AI_GATEWAY_INTERNAL_KEY=

# Database
DB_PORT=5432
LOCAL_DB_PORT=5433
DB_HOST=localhost
DB_NAME=verifywise

DB_USER=postgres
# DB_PASSWORD: password for the PostgreSQL DB_USER above (use a strong, random value)
# Generate with: openssl rand -hex 16
DB_PASSWORD=

# Redis
REDIS_HOST=redis
REDIS_PORT=6379

# Super-Admin Credentials (used during migration to seed the super-admin user)
SUPERADMIN_EMAIL=admin@verifywise.com
# SUPERADMIN_PASSWORD: initial super-admin login password (≥8 chars, upper, lower, digit, symbol)
# Example: SUPERADMIN_PASSWORD=ChangeMe!Str0ng
SUPERADMIN_PASSWORD=

# Backend Settings
MOCK_DATA_ON=false
# JWT_SECRET: secret used to sign access tokens (use a long, random value)
# Generate with: openssl rand -hex 64
JWT_SECRET=
# REFRESH_TOKEN_SECRET: secret used to sign refresh tokens (use a different long, random value)
# Generate with: openssl rand -hex 64
REFRESH_TOKEN_SECRET=

# Encryption Settings
# ENCRYPTION_ALGORITHM: OpenSSL cipher used to encrypt secure values (must use a 256-bit key / 16-byte IV)
# Example: ENCRYPTION_ALGORITHM=aes-256-cbc
ENCRYPTION_ALGORITHM=
# ENCRYPTION_PASSWORD: passphrase used to derive the encryption key (use a long, random string)
# Generate with: openssl rand -hex 32
ENCRYPTION_PASSWORD=
# ENCRYPTION_KEY is used for encrypting/decrypting LLM API keys (must be consistent across deployments)
# If not set, defaults to a hardcoded key. For production, set a unique 32+ character key.
# WARNING: Changing this after API keys are saved will make them unreadable - re-save keys after changing.
# ENCRYPTION_KEY=your-unique-32-character-key-here

SLACK_CLIENT_ID=YOUR_SLACK_CLIENT_ID
SLACK_CLIENT_SECRET=YOUR_SLACK_CLIENT_SECRET
SLACK_URL=https://slack.com/oauth/v2/authorize
SLACK_API_URL=https://slack.com/api/oauth.v2.access
SLACK_USER_OAUTH_TOKEN=YOUR_SLACK_USER_OAUTH_TOKEN
SLACK_BOT_TOKEN=YOUR_SLACK_BOT_TOKEN

# Microsoft Entra ID (Azure AD) SSO
# SSO_ENABLED=true exposes /api/ssoConfig/* and the login-page SSO section.
# Leave false in trial/SaaS deployments that don't need SSO.
SSO_ENABLED=false
# SSO_SECRET: 32+ char random string used as the key source for AES-256-GCM
# encryption of stored Azure AD client secrets. Required when SSO_ENABLED=true.
SSO_SECRET=

# Email Configuration
# EMAIL_PROVIDER: Choose email service provider (required)
# Options: "resend" (default), "smtp", "exchange-online", "exchange-onprem", "amazon-ses"
EMAIL_PROVIDER=resend
EMAIL_ID=your-email@company.com

# Resend Provider Configuration (when EMAIL_PROVIDER=resend)
# Get your API key from: https://resend.com/api-keys
RESEND_API_KEY=your-resend-api-key

# Generic SMTP Provider Configuration (when EMAIL_PROVIDER=smtp)
# For custom SMTP servers, Gmail, or other providers
# SMTP_HOST=smtp.your-server.com
# SMTP_PORT=587
# SMTP_USER=your-email@company.com
# SMTP_PASS="your-password"
# SMTP_SECURE=false

# Exchange Online (Office 365) Configuration (when EMAIL_PROVIDER=exchange-online)
# Most common choice for enterprises using Microsoft 365
# EXCHANGE_ONLINE_USER=your-email@company.onmicrosoft.com
# EXCHANGE_ONLINE_PASS="your-app-password"
# EXCHANGE_ONLINE_TENANT_ID=your-tenant-id-optional

# On-Premises Exchange Server Configuration (when EMAIL_PROVIDER=exchange-onprem)
# For organizations with self-hosted Exchange servers
# EXCHANGE_ONPREM_HOST=mail.company.com
# EXCHANGE_ONPREM_PORT=587
# EXCHANGE_ONPREM_USER=your-username
# EXCHANGE_ONPREM_PASS="your-password"
# EXCHANGE_ONPREM_DOMAIN=COMPANY
# EXCHANGE_ONPREM_SECURE=false

# Amazon SES Configuration (when EMAIL_PROVIDER=amazon-ses)
# Popular choice for SaaS applications and enterprises on AWS
# AWS_SES_REGION=us-east-1
# AWS_SES_ACCESS_KEY_ID=your-access-key-id
# AWS_SES_SECRET_ACCESS_KEY=your-secret-access-key
# AWS_SES_API_VERSION=2010-12-01
# SES_CONFIGURATION_SET=your-configuration-set-optional