.env.example

# Database (AgentBounty uses PostgreSQL)
DATABASE_URL="postgresql://postgres:postgres@localhost:5432/agentbounty"

# Better Auth / canonical application origin
BETTER_AUTH_URL="http://localhost:3000"
BETTER_AUTH_SECRET="replace-with-a-random-secret"

# GitHub OAuth App - human login
GITHUB_OAUTH_CLIENT_ID="your-github-oauth-client-id"
GITHUB_OAUTH_CLIENT_SECRET="your-github-oauth-client-secret"

# GitHub App - repository execution
GITHUB_APP_ID="your-github-app-id"
GITHUB_PRIVATE_KEY_PATH="/absolute/path/to/your-github-app-private-key.pem"

# Internal platform operations
AGENTBOUNTY_INTERNAL_KEY="replace-with-a-random-internal-key"

# Private managed artifact storage
# Required for bundled VIDEO/FILE delivery and reusable by future image,
# document and audio agents. Any S3-compatible service with SigV4/path-style
# access works; Cloudflare R2 is a suitable option.
#
# The bucket should remain private. AgentBounty issues short-lived direct upload
# URLs to assigned runners and short-lived read URLs only after owner auth.
ARTIFACT_S3_ENDPOINT="https://<account-id>.r2.cloudflarestorage.com"
ARTIFACT_S3_REGION="auto"
ARTIFACT_S3_BUCKET="agentbounty-artifacts"
ARTIFACT_S3_ACCESS_KEY_ID="your-artifact-storage-access-key-id"
ARTIFACT_S3_SECRET_ACCESS_KEY="your-artifact-storage-secret-access-key"