cortex/.env.example at main · askmy-stack/cortex · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
# ─────────────────────────────────────────────────────────────────────────────
# Cortex — Environment Configuration
# Copy to .env and fill in values. Never commit .env.
# ─────────────────────────────────────────────────────────────────────────────

# ── Slack connector ──────────────────────────────────────────────────────────
SLACK_BOT_TOKEN=xoxb-your-slack-bot-token
SLACK_SIGNING_SECRET=your-slack-signing-secret
SLACK_APP_TOKEN=xapp-your-slack-app-token

# ── GitHub connector ─────────────────────────────────────────────────────────
GITHUB_TOKEN=ghp_your-github-token
GITHUB_WEBHOOK_SECRET=your-github-webhook-secret
LINEAR_WEBHOOK_SECRET=your-linear-webhook-secret

# ── Jira connector ───────────────────────────────────────────────────────────
JIRA_BASE_URL=https://your-org.atlassian.net
JIRA_EMAIL=your-email@company.com
JIRA_API_TOKEN=your-jira-api-token

# ── LLM extraction ───────────────────────────────────────────────────────────
# Extraction backend: "openai" (production) | "ollama" (local development)
EXTRACTION_BACKEND=ollama

OPENAI_API_KEY=sk-your-openai-api-key
OPENAI_MODEL=gpt-4o

OLLAMA_BASE_URL=http://localhost:11434
# Host-local default. Docker pipeline-worker overrides to http://host.docker.internal:11434.
# Use a model you have pulled: `ollama pull llama3.1:8b`
OLLAMA_MODEL=llama3.1:8b

# ── Neo4j ────────────────────────────────────────────────────────────────────
# Local uvicorn: bolt://localhost:7687. Docker Compose overrides this for api/pipeline-worker (bolt://neo4j:7687).
NEO4J_URI=bolt://localhost:7687
NEO4J_USER=neo4j
NEO4J_PASSWORD=cortex_local

# ── PostgreSQL (org config + audit log) ──────────────────────────────────────
POSTGRES_HOST=localhost
POSTGRES_PORT=5432
POSTGRES_USER=cortex
POSTGRES_PASSWORD=cortex_local
POSTGRES_DB=cortex

# ── TimescaleDB (episodic memory) ────────────────────────────────────────────
TIMESCALE_HOST=localhost
TIMESCALE_PORT=5433
# Docker pipeline-worker overrides: TIMESCALE_HOST=timescaledb, TIMESCALE_PORT=5432
TIMESCALE_USER=cortex
TIMESCALE_PASSWORD=cortex_local
TIMESCALE_DB=cortex_events

# ── Qdrant (semantic memory) ─────────────────────────────────────────────────
QDRANT_HOST=localhost
QDRANT_PORT=6333

# ── Redis (hot cache) ────────────────────────────────────────────────────────
# Docker Compose overrides REDIS_HOST to `redis` for api/pipeline-worker.
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=cortex_local

# ── Kafka ────────────────────────────────────────────────────────────────────
# External listener on host :9092. Compose sets KAFKA_BOOTSTRAP_SERVERS=kafka:29092 for workers.
KAFKA_BOOTSTRAP_SERVERS=localhost:9092

# ── Workspace ────────────────────────────────────────────────────────────────
CORTEX_WORKSPACE_ID=local-dev

# ── API ──────────────────────────────────────────────────────────────────────
API_HOST=0.0.0.0
API_PORT=8000
API_SECRET_KEY=change-this-in-production
JWT_ALGORITHM=HS256
JWT_EXPIRY_HOURS=24

# Optional API-key auth for read/write routes (unset = open dev mode).
# Format: key1:admin;authenticated,key2:authenticated
CORTEX_API_KEYS=

# Demo smoke test (`make demo` / scripts/demo.sh) sends this key when API auth is on.
# Must match one of the keys in CORTEX_API_KEYS (preview/staging deploys).
# CORTEX_DEMO_API_KEY=your-preview-demo-key

# Dashboard build-time default (overridable in UI). MCP uses CORTEX_API_KEY below.
# Plan A (Cloudflare Pages): set to your Render API URL, e.g. https://cortex-api.onrender.com
VITE_API_URL=
VITE_CORTEX_API_KEY=

# Comma-separated browser origins for dashboard (Plan A / cross-origin API).
# Example: https://cortex-dashboard.pages.dev,https://main.cortex-dashboard.pages.dev
CORS_ORIGINS=

# ── MCP Server ───────────────────────────────────────────────────────────────
MCP_PORT=8001
CORTEX_API_URL=http://localhost:8000

# Required whenever ENVIRONMENT=production (see mcp/Dockerfile). Without it,
# the MCP server refuses all tool calls rather than trusting the legacy
# X-Cortex-Roles header, which would let any process with MCP env access
# escalate to admin/gdpr_officer.
CORTEX_API_KEY=

# ── Grafana ──────────────────────────────────────────────────────────────────
GRAFANA_USER=admin
GRAFANA_PASSWORD=cortex_local

# ── MLflow ───────────────────────────────────────────────────────────────────
# Host port 5001 avoids macOS AirPlay Receiver conflict on 5000.
MLFLOW_TRACKING_URI=http://localhost:5001

# ── CMVK (high-stakes write verification, importance > 0.8) ─────────────────
# Backend: heuristic (default, zero API cost) | openai | ollama
CORTEX_CMVK_ENABLED=true
CORTEX_CMVK_BACKEND=heuristic
# Production OpenAI verifier model (3 independent prompts, same model)
CORTEX_CMVK_OPENAI_MODEL=gpt-4o-mini
# Ollama CMVK model (falls back to OLLAMA_MODEL)
# CORTEX_CMVK_OLLAMA_MODEL=llama3.1:8b

# ── Feature flags (intelligence + semantic) ─────────────────────────────────
CORTEX_CONTRADICTION_ENABLED=true
CORTEX_CONTRADICTION_KAFKA=true
CORTEX_SEMANTIC_ENABLED=false

# ── OpenTelemetry (optional — enable distributed tracing) ─────────────────
# Start collector stack: docker compose --profile observability up -d
# Then uncomment for dockerized API (use otel-collector hostname on cortex network):
# OTEL_EXPORTER_OTLP_ENDPOINT=http://otel-collector:4318/v1/traces
# OTEL_SERVICE_NAME=cortex-api
# Jaeger UI: http://localhost:16686

# ── Logging ──────────────────────────────────────────────────────────────────
LOG_LEVEL=INFO
LOG_FORMAT=json