-
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path.env.example
More file actions
145 lines (116 loc) · 6.22 KB
/
Copy path.env.example
File metadata and controls
145 lines (116 loc) · 6.22 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
# Full Chaos Dev Health Web - Environment Variables
# Copy this file to .env.local and configure as needed
# =============================================================================
# Backend Configuration
# =============================================================================
# Backend API URL (required for full-stack mode)
BACKEND_URL=http://127.0.0.1:8000
# Optional: override backend URL used by pricing marketing page
# NEXT_PUBLIC_API_URL=http://127.0.0.1:8000
# =============================================================================
# Feature Flags
# =============================================================================
# Enable GraphQL analytics (Investment View, Work Graph)
# Defaults to true unless explicitly set to "false"
# Set to "false" to disable GraphQL and fall back to REST API
NEXT_PUBLIC_USE_GRAPHQL_ANALYTICS=true
# Optional server-only override used at runtime config generation
# USE_GRAPHQL_ANALYTICS=true
# Use sample data instead of live API (for testing/demos)
# Set to "true" to bypass API calls and use static data
NEXT_PUBLIC_DEV_HEALTH_TEST_MODE=false
# Enable demo-only tabs and sample-data panels in the UI (e.g., Code Hotspots, Investment Expense)
# Set to "true" to show demo content that is backed by static sample data rather than live APIs
NEXT_PUBLIC_DEMO_MODE=false
# =============================================================================
# Hosting Configuration
# =============================================================================
# Enable static export mode (for GitHub Pages, CDN hosting)
# Set to "true" when running `next build` for static export
DEMO_EXPORT=false
# Base path for subpath hosting (e.g., "/app" for example.com/app)
# Leave empty for root hosting
BASE_PATH=
# Documentation URL (shown in UI help links)
NEXT_PUBLIC_DOCS_URL=
# Optional: hide/show beta badge in marketing nav (default shown)
# Set to "false" to hide
# NEXT_PUBLIC_BETA=true
# =============================================================================
# Authentication
# =============================================================================
# Auth.js secret (required in production, auto-generated for dev)
# Generate with: openssl rand -base64 32
AUTH_SECRET=
# Auth.js base URL (required for non-localhost environments)
# Set to the full URL where the app is hosted (e.g., https://app.example.com)
# Required for CSRF origin validation — without this, sign-in/sign-up will fail
# with a 'request origin validation' error in Docker, reverse proxy, or production.
# In local dev on localhost:3000, Auth.js auto-detects this, but Docker/reverse
# proxy setups should set it explicitly so GitHub redirect_uri uses the right host.
# AUTH_URL=http://localhost:3000
# Deprecated alias for AUTH_SECRET (kept for backward compatibility)
# NEXTAUTH_SECRET=
# Social Login (OAuth provider credentials)
# GitHub: use the GitHub App Client ID/secret if you want one app to power both
# Connect GitHub App and Sign in with GitHub. Register this callback on the
# GitHub App: http://localhost:3000/api/auth/callback/github
# NOTE: The same OAuth credentials must also be set in ops/.env
# (SOCIAL_GITHUB_CLIENT_ID/SECRET, SOCIAL_GOOGLE_CLIENT_ID/SECRET, etc.).
AUTH_GITHUB_ID=
AUTH_GITHUB_SECRET=
AUTH_GOOGLE_ID=
AUTH_GOOGLE_SECRET=
AUTH_GITLAB_ID=
AUTH_GITLAB_SECRET=
# =============================================================================
# Agent Context Runtime (server only)
# =============================================================================
# Private service origin; TLS terminates at the externally exposed edge.
# ACR_API_ORIGIN=http://acr-api:8080
# ACR_WEB_ASSERTION_KEY_FILE=/run/secrets/acr-web-assertion.key
# ACR_WEB_ASSERTION_KID=web-key-2026
# ACR_WEB_ASSERTION_ISSUER=dev-health-web
# ACR_WEB_ASSERTION_AUDIENCE=dev-health-acr
# ACR_REQUEST_TIMEOUT_MS=5000
# The private key file must be a regular Ed25519 private-key file readable only
# by its owner (mode 0600). Never use NEXT_PUBLIC_* variables for ACR settings.
# =============================================================================
# Feedback -> Linear Integration (Optional)
# =============================================================================
# The /api/feedback route returns 503 unless both vars are set.
# Use a Linear API key in Authorization header format (for example: "Bearer lin_api_xxx")
# LINEAR_API_KEY=
# LINEAR_TEAM_ID=
# =============================================================================
# Redis (Optional — used for distributed rate limiting)
# =============================================================================
# When set, the feedback API rate limiter uses Redis instead of in-memory state.
# Falls back to in-memory (per-process) when unset or unreachable.
# REDIS_URL=redis://localhost:6379/0
# =============================================================================
# Observability
# =============================================================================
# Sentry DSN — set to enable error tracking and performance monitoring.
# Get your DSN from https://sentry.io → Project → Settings → Client Keys.
# NEXT_PUBLIC_SENTRY_DSN=https://xxxx@oXXXXXX.ingest.sentry.io/XXXXXXX
# SENTRY_DSN=https://xxxx@oXXXXXX.ingest.sentry.io/XXXXXXX
# Sentry auth token — required to upload source maps during `next build`.
# Create at https://sentry.io → Settings → Auth Tokens → New Token (scope: project:releases).
# SENTRY_AUTH_TOKEN=
# Minimum log level (trace | debug | info | warn | error | fatal).
# Defaults to "debug" in development and "info" in production.
# LOG_LEVEL=info
# Log output format (json | pretty).
# Defaults to "pretty" in development and "json" in production.
# Set LOG_FORMAT=json in dev to test structured output locally.
# LOG_FORMAT=pretty
# RUM (Real User Monitoring) endpoint — opt-in; leave unset to disable.
# When set, Web Vitals are POSTed to /api/v1/rum on each page navigation.
# Requires a corresponding /api/v1/rum route to be implemented.
# NEXT_PUBLIC_RUM_ENDPOINT=true
# =============================================================================
# Development Only
# =============================================================================
# Server-side test mode (set by Playwright, usually not needed manually)
# DEV_HEALTH_TEST_MODE=false