dqt/.env.example at main · antonbarr-data/dqt · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
# dqt local environment
# Copy to .env and fill in the values.
# Lines starting with # are comments — not loaded by the server.

# ─── AI / LLM ────────────────────────────────────────────────────────────────
# Powers agent, insight narratives, check suggestions, and Google OKF / Apache
# Ossie extraction. Leave the active provider's key blank to run without AI.
#
# Pick ONE provider. Default is "anthropic" (direct Claude); "litellm" routes
# through an OpenAI-compatible endpoint (a LiteLLM proxy, or providers directly).
DQT_LLM_PROVIDER=anthropic          # anthropic | litellm

# Shared knobs (apply to whichever provider is active):
DQT_LLM_MAX_TOKENS=1024             # per-response cap
DQT_LLM_TEMPERATURE=0               # 0 = deterministic; raise for more variety
DQT_LLM_TIMEOUT_SECONDS=60          # per-request timeout

# --- Provider: anthropic (direct Claude) ------------------------------------
# Get a key from https://console.anthropic.com/
ANTHROPIC_API_KEY=
ANTHROPIC_MODEL=claude-haiku-4-5-20251001

# --- Provider: litellm (OpenAI-compatible / proxy) --------------------------
# Used only when DQT_LLM_PROVIDER=litellm.
# LITELLM_MODEL uses LiteLLM's "provider/model" naming.
LITELLM_MODEL=gpt-4o                # e.g. gpt-4o, claude-3-5-haiku, bedrock/anthropic.claude-3-5-sonnet, vertex_ai/gemini-1.5-pro
LITELLM_API_BASE=                   # LiteLLM proxy URL, e.g. http://localhost:4000; set = route to the proxy (model forwarded as-is); blank = call providers directly by LITELLM_MODEL's prefix
LITELLM_API_KEY=                    # proxy virtual key, or the provider key for LITELLM_MODEL
# When calling providers directly (no proxy), LiteLLM also reads the native
# provider keys, e.g. OPENAI_API_KEY / AZURE_API_KEY / GEMINI_API_KEY. Set the
# one your LITELLM_MODEL needs:
OPENAI_API_KEY=

# ─── Auth ────────────────────────────────────────────────────────────────────
# JWT signing key — used to sign session tokens. Must be secret and stable.
# Generate: openssl rand -hex 32
JWT_SECRET_KEY=

# ─── Database ────────────────────────────────────────────────────────────────
# Postgres connection string. The local Docker stack runs on port 5434.
# Format: postgresql+asyncpg://<user>:<password>@<host>:<port>/<dbname>
DATABASE_URL=postgresql+asyncpg://dqt:dqtdev@localhost:5434/dqt

# ─── Credential encryption ───────────────────────────────────────────────────
# Key used to encrypt warehouse connection credentials at rest.
# Generate: python3 -c "import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())"
DQT_CREDS_KEY=

# ─── Super-admin account ─────────────────────────────────────────────────────
# Created automatically on first server start if the email is not in the DB.
# Use these credentials to log in with email/password on the login page.
ADMIN_EMAIL=admin@localhost
ADMIN_PASSWORD=

# ─── URLs ────────────────────────────────────────────────────────────────────
# Local dev: leave as-is.
# Production: set to your actual domains.
FRONTEND_URL=http://localhost:3000
NEXT_PUBLIC_API_URL=http://localhost:8000
BACKEND_URL=http://localhost:8000

# ─── Google OAuth (optional) ─────────────────────────────────────────────────
# Leave blank to use email/password login only.
# To enable: create OAuth credentials at https://console.cloud.google.com/
#   1. APIs & Services → Credentials → Create OAuth client ID → Web application
#   2. Authorised redirect URI: http://localhost:8000/api/v1/auth/google/callback
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_REDIRECT_URI=http://localhost:8000/api/v1/auth/google/callback