.env.example

# Optional: only required when Gemini is selected in the UI.
GEMINI_API_KEY=

QDRANT_URL=http://localhost:6333
# Optional: required only when the Ollama provider is selected.
# Choose any Ollama chat model. RPG suggestion: dolphin-llama3:8b
OLLAMA_LLM_MODEL=
GEMINI_LLM_MODEL=gemini-2.5-flash-lite
EMBED_MODEL=nomic-embed-text
SPARSE_MODEL=Qdrant/bm25
HYBRID_ENABLED=false
HYBRID_ALPHA=0.6
RETRIEVAL_TOP_K=10
RERANK_ENABLED=false
RERANK_TOP_N=4
ROUTER_MAX_BOOKS=2
MEMORY_MESSAGE_LIMIT=8
SESSION_DB=runtime/sessions.db
GAME_DB=runtime/multiplayer.db
WEB_ORIGIN=http://localhost:5173
DM_GRACE_SECONDS=60
# Optional for multi-worker deployments. When unset, presence, broadcasts,
# grace scheduling and rate limits remain process-local for local/LAN use.
REDIS_URL=
# 1-64 safe key characters: letters, numbers, dot, underscore and hyphen.
REDIS_NAMESPACE=dnd-table
# Must match the actual --workers value used by the production launcher.
WEB_CONCURRENCY=1
# Optional readable worker label; a random per-process nonce is always appended.
INSTANCE_ID=
# Local/LAN default is false. Public mode requires HTTPS WEB_ORIGIN and a
# private random AUTH_PEPPER of at least 32 characters.
# Set AUTH_PEPPER before creating public data and keep it stable; changing it
# requires controlled credential reissue and otherwise fails fast at startup.
PUBLIC_MODE=false
AUTH_PEPPER=
# One-time acknowledgement only when upgrading an existing v5/v6 database
# whose credentials were already created with this exact pepper.
AUTH_PEPPER_BIND_EXISTING=false
TOKEN_TTL_HOURS=720
INVITE_TTL_HOURS=168
# Applied before FastAPI parses JSON; reverse proxies should enforce the same or lower cap.
MAX_REQUEST_BODY_BYTES=262144
# VTT map binaries stay outside SQLite in a content-addressed local object store.
# Keep the reverse-proxy upload cap at or below this value.
MAX_MAP_UPLOAD_BYTES=10485760
MAP_OBJECT_ROOT=runtime/map-assets
# Production upload gate. When enabled, structurally valid map bytes must also
# pass a ClamAV daemon INSTREAM scan; scanner outages fail closed with HTTP 503.
UPLOAD_SCAN_REQUIRED=false
CLAMAV_HOST=127.0.0.1
CLAMAV_PORT=3310
# Derived, access-controlled fog composites are disposable and may be cleared
# while the service is stopped. Keep this separate from MAP_OBJECT_ROOT.
MAP_FOG_CACHE_ROOT=runtime/map-fog-cache
# Optional Prometheus endpoint token. Empty disables /api/metrics with 404.
METRICS_TOKEN=
# Optional restricted catalog-management surface. When unset, developer APIs
# return 404. Use at least 32 random characters and send only over HTTPS in public mode.
DEVELOPER_ADMIN_TOKEN=