-
Notifications
You must be signed in to change notification settings - Fork 32
Expand file tree
/
Copy path.env.example
More file actions
157 lines (132 loc) · 6.86 KB
/
Copy path.env.example
File metadata and controls
157 lines (132 loc) · 6.86 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
#####################################################################################
# RHESIS SELF-HOSTING CONFIGURATION
#####################################################################################
# Copy to .env.docker:
# cp .env.example .env.docker
# Set the required values, then:
# docker compose --env-file .env.docker up -d
#
# Commented lines show the default from docker-compose.yml / application code.
# Uncomment a line only to override it.
#####################################################################################
# =============================================================================
# REQUIRED
# =============================================================================
# Generate: openssl rand -base64 32 | tr '+/' '-_'
DB_ENCRYPTION_KEY=
# Generate each: openssl rand -hex 32
JWT_SECRET_KEY=
NEXTAUTH_SECRET=
SESSION_SECRET_KEY=
# =============================================================================
# PUBLIC URLS
# =============================================================================
# Set FRONTEND_URL and API_BASE_URL for your public domain or reverse proxy; https enables secure cookies.
# FRONTEND_PORT and BACKEND_PORT are the host ports Docker publishes (defaults: 3000, 8080).
# FRONTEND_URL=http://localhost:3000
# API_BASE_URL=http://localhost:8080
# FRONTEND_PORT=3000
# BACKEND_PORT=8080
# =============================================================================
# BRANDING
# =============================================================================
# Optional. Rebrands the frontend without rebuilding the image — both are read
# at request time. Leave unset for the standard Rhesis look; a malformed value
# is ignored with a warning.
# BRAND_PRIMARY_COLOR and BRAND_SECONDARY_COLOR must be 6-digit hex; either can
# be set on its own. BRAND_FAVICON_URL must be an https://
# URL or a root-relative path, and also becomes the sidebar brand mark.
# BRAND_PRODUCT_NAME replaces "Rhesis AI" in page titles (max 60 characters).
# BRAND_PRIMARY_COLOR=#6A1B9A
# BRAND_SECONDARY_COLOR=#C2185B
# BRAND_FAVICON_URL=https://www.example.com/favicon.png
# BRAND_PRODUCT_NAME=Acme
# BRAND_FONT_FAMILY overrides the default "Be Vietnam Pro" typeface.
# When set alone, the font is loaded from Google Fonts. To self-host the files
# instead, also set BRAND_FONT_BASE_URL — the app loads
# {base_url}/{slug}-{300,400,700}.ttf (e.g. inria-sans-300.ttf).
# BRAND_FONT_FAMILY=Inria Sans
# BRAND_FONT_BASE_URL=https://example.com/assets/fonts
# =============================================================================
# DATABASE
# =============================================================================
# DB_HOST=postgres
# DB_PORT=5432
# DB_NAME=rhesis-db # fixed — must be rhesis-db
# APP_DB_USER=rhesis-user # fixed — must be rhesis-user
# APP_DB_PASS=rhesis-password
# ADMIN_DB_USER=
# ADMIN_DB_PASS=
# =============================================================================
# REDIS
# =============================================================================
# Built-in Redis unless overridden. Set both to use an external Redis.
# BROKER_URL=redis://:your-redis-password@your-redis-host:6379/0
# CELERY_RESULT_BACKEND=redis://:your-redis-password@your-redis-host:6379/1
# =============================================================================
# AI MODELS
# =============================================================================
# Rhesis-hosted by default; get a key at https://app.rhesis.ai/.
# RHESIS_API_KEY=
# ENABLE_RHESIS_KEY=true # Lets org owners configure a Rhesis platform key from the
# # UI (Models page) instead of only this env var.
# DEFAULT_GENERATION_MODEL=rhesis/rhesis
# DEFAULT_EVALUATION_MODEL=rhesis/rhesis
# DEFAULT_EXECUTION_MODEL=rhesis/rhesis
# DEFAULT_EMBEDDING_MODEL=rhesis/rhesis-embedding
# =============================================================================
# OAUTH
# =============================================================================
# GOOGLE_CLIENT_ID=your-google-client-id
# GOOGLE_CLIENT_SECRET=your-google-client-secret
# GH_CLIENT_ID=your-github-client-id
# GH_CLIENT_SECRET=your-github-client-secret
# AUTH_REGISTRATION_ENABLED=true
# AUTH_EMAIL_PASSWORD_ENABLED=true
# Disposable-email screening on self-serve sign-up (admin invites are never screened).
# off = skip entirely, log = record matches but let the sign-up through, enforce = reject with 400.
# AUTH_BLOCK_DISPOSABLE_EMAILS=log
# Extra domains to block on top of the community list, comma-separated.
# AUTH_DISPOSABLE_EMAIL_EXTRA_DOMAINS=
# =============================================================================
# ENTERPRISE FEATURES
# =============================================================================
# Only needed with the Enterprise package installed.
# AUTH_DEFAULT_SSO_ORGANIZATION= # Org slug or UUID used when no ?org= param is on the login URL
# SSO_ENCRYPTION_KEY= # SSO; keep stable. Generate: openssl rand -base64 32 | tr '+/' '-_'
# AUDIT_HASH_KEY= # API Clients. Generate: openssl rand -hex 32
# =============================================================================
# SMTP
# =============================================================================
# Email notifications are disabled unless SMTP_HOST, SMTP_USER and SMTP_PASSWORD are all set.
# SMTP_HOST=smtp.example.com
# SMTP_PORT=587
# SMTP_USER=your-smtp-username
# SMTP_PASSWORD=your-smtp-password
# FROM_EMAIL=noreply@example.com
# =============================================================================
# OBJECT STORAGE
# =============================================================================
# Local Docker volume by default; also accepts gs:// and s3:// URIs.
# STORAGE_SERVICE_URI=file:///app/storage
# STORAGE_SERVICE_ACCOUNT_KEY=your-base64-service-account-key
# LOCAL_STORAGE_PATH=/tmp/rhesis-files
# =============================================================================
# TELEMETRY
# =============================================================================
# On by default for self-hosted deployments.
# OTEL_RHESIS_TELEMETRY_ENABLED=true
# =============================================================================
# ADVANCED TUNING
# =============================================================================
# BACKEND_ENV=local # set to "local" by docker-compose.yml for self-hosting;
# # enables local-only model providers (Ollama, etc.) and
# # skips the SaaS Polyphemus access-request email flow.
# LOG_LEVEL=INFO
# QUICK_START=false
# CELERY_WORKER_CONCURRENCY=8
# CELERY_WORKER_PREFETCH_MULTIPLIER=4
# CELERY_WORKER_LOGLEVEL= # defaults to LOG_LEVEL
# USAGE_QUOTAS_ENABLED=false # cloud-only; enables per-org usage quota enforcement.
# # Self-hosted deployments leave this unset (default false)
# # so no usage limits apply.