outpost/.env.example at main · getsentry/outpost · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
# outpost environment variables.
# Copy to `.env` and fill in real values:
#
#   cp .env.example .env
#
# Then pass it to docker locally:
#
#   docker run --env-file .env ... outpost
#
# On Railway / Fly / Render etc. set these via the platform's variables UI.
# NEVER commit `.env` — only this template.

# === Required: at least one LLM provider key ===
# Configure as many as you want; switch between them in the model picker.
ANTHROPIC_API_KEY=
OPENAI_API_KEY=
GEMINI_API_KEY=
GROQ_API_KEY=
OPENROUTER_API_KEY=

# === Optional: server config ===
# Port the web server listens on. Set automatically by most PaaS providers
# (Railway / Fly / Render). Defaults to 4096.
PORT=

# === Optional: Sentry CLI (https://cli.sentry.dev) ===
# Used by the bundled `sentry` CLI. For non-interactive auth, run
# `sentry auth login --token "$SENTRY_AUTH_TOKEN"` from inside an OpenCode
# bash session.
SENTRY_AUTH_TOKEN=

# Self-hosted Sentry endpoint (omit for sentry.io).
# SENTRY_URL=https://sentry.example.com

# Sentry DSN for the opentower plugin. If set, Sentry.init()
# is called at plugin startup and unhandled rejections are captured.
# SENTRY_DSN=

# Fraction of requests traced by the webhooks plugin (0.0–1.0).
# Defaults to 0.1 (10%). Set to 1.0 for debugging, 0 to disable tracing.
# SENTRY_TRACES_SAMPLE_RATE=0.1

# === Optional: GitHub CLI fallback (https://cli.github.com) ===
# Fallback for when a GitHub App is not configured. When a GitHub App
# IS configured, the bootstrap process acquires installation tokens and
# sets GH_TOKEN automatically — you don't need to set this manually.
# GH_TOKEN=

# === Required: GitHub App authentication ===
# Outpost uses a GitHub App for all webhook handling and agent actions.
# Create an app at https://github.com/settings/apps with these permissions:
#   Contents (read & write), Issues (read & write),
#   Pull requests (read & write), Checks (read), Actions (read & write)
# Subscribe to events: check_suite, issue_comment, issues, pull_request,
#   pull_request_review, pull_request_review_comment, push, workflow_run
#
# All three variables are required. The bootstrap process will:
#   1. Discover the default installation
#   2. Acquire an installation token and set it as GH_TOKEN
#   3. Refresh the token every 45 minutes (tokens expire after 60 min)
#   4. Configure git identity from the app's bot account
#   5. Resolve the bot login (<slug>[bot]) for self-loop prevention
#
# The private key is the PEM file generated when creating the app;
# literal \n in the value is auto-converted to real newlines.
GITHUB_APP_ID=
GITHUB_APP_PRIVATE_KEY=
GITHUB_APP_WEBHOOK_SECRET=

# Override the bundled opentower.config.json with one of your own. Default
# resolves to ~/.config/opencode/opentower.config.json (the baked-in file).
# Point this at a path on the persistent ~/dev volume to customize
# triggers without rebuilding the image.
# OPENTOWER_CONFIG=/home/developer/dev/.opencode/opentower.config.json

# Port the plugin's webhook listener binds to. Defaults to 5050. Expose
# this separately from the opencode web UI port (4096 / $PORT) on your
# platform.
# WEBHOOK_PORT=5050

# CORS origin for the opentower API. Not needed in production (dashboard
# is served same-origin). Set during development to allow the Vite dev
# server to reach the API.
# OPENTOWER_CORS_ORIGIN=http://localhost:5173

# Bearer token for the /api/* dashboard endpoints. Without this, all
# API requests are rejected with 503. Generate with:
#   openssl rand -base64 32
OPENTOWER_API_TOKEN=

# === Optional: outbound proxy ===
# HTTPS_PROXY=
# HTTP_PROXY=
# NO_PROXY=localhost,127.0.0.1