.env.dev.example

# When adding additional environment variables, the schema in "/src/env.mjs"
# should be updated accordingly.

# ============================================================================
# DOCKER CONFIGURATION
# ============================================================================
# These variables configure docker-compose port mappings and container names
# To run multiple instances, copy this file to .env and customize these values

# Host Ports
# POSTGRES_HOST_PORT=5432
# REDIS_HOST_PORT=6379
# MINIO_API_PORT=9090
# MINIO_CONSOLE_PORT=9091
# WEB_HOST_PORT=3000
# WORKER_HOST_PORT=3030

# Container Names
# POSTGRES_CONTAINER_NAME=langfuse-postgres
# REDIS_CONTAINER_NAME=langfuse-redis
# MINIO_CONTAINER_NAME=langfuse-minio
# WEB_CONTAINER_NAME=langfuse-web
# WORKER_CONTAINER_NAME=langfuse-worker

# Volumes
# POSTGRES_VOLUME_NAME=langfuse_postgres_data
# MINIO_VOLUME_NAME=langfuse_minio_data

# Network
# DOCKER_NETWORK_NAME=langfuse-network

# ============================================================================
# APPLICATION CONFIGURATION
# ============================================================================

# Prisma
# https://www.prisma.io/docs/reference/database-reference/connection-urls#env
DIRECT_URL="postgresql://postgres:postgres@localhost:5432/postgres"
DATABASE_URL="postgresql://postgres:postgres@localhost:5432/postgres"


# GreptimeDB (write-path migration, 02-write-path.md). All values have local-dev
# defaults in env.ts; uncomment to override. gRPC 4001 = ingester writes, MySQL 4002 = reads.
# GREPTIME_GRPC_URL takes one address, or comma-separated frontends for a cluster
# (e.g. "fe1:4001,fe2:4001") — the SDK load-balances and fails over across them.
# GREPTIME_GRPC_URL="localhost:4001"
# GREPTIME_SQL_HOST="localhost"
# GREPTIME_SQL_PORT="4002"
# GREPTIME_SQL_READ_ONLY_HOST="localhost"
# GREPTIME_DB="openfuse"
# GREPTIME_USER="openfuse"
# GREPTIME_PASSWORD="" # empty -> local GreptimeDB runs without auth
# GREPTIME_SQL_MAX_OPEN_CONNECTIONS="25"
# GREPTIME_RAW_EVENTS_TABLE="raw_events"
# LANGFUSE_GREPTIME_WRITE_MAX_FIELD_BYTES applies only when reactively truncating an oversized row.
# LANGFUSE_GREPTIME_WRITE_MAX_FIELD_BYTES="1000000"
# GreptimeDB database-level retention (TTL), applied to every table at schema bootstrap.
# humantime duration; default 730d (2 years). Change the whole store at any time with a single
# ALTER DATABASE ... SET 'ttl'.
# LANGFUSE_GREPTIME_TTL="730d"
# Worker-only: per-table region-statistics sampler (SST file counts, region rows, disk/memtable
# size). A single worker emits each interval via a Redis cooldown lock. Disable, or tune the period.
# LANGFUSE_GREPTIME_STATS_ENABLED="true"
# LANGFUSE_GREPTIME_STATS_INTERVAL_MS="60000"
# Backfill-only: write reconciliation projections via bulk Arrow Flight (decimal-free tables) instead
# of unary gRPC. Off by default; steady-state ingestion is unaffected.
# LANGFUSE_GREPTIME_BULK_BACKFILL_ENABLED="false"
# LANGFUSE_GREPTIME_BULK_BATCH_SIZE="10000"

# Next Auth
# You can generate a new secret on the command line with:
# openssl rand -base64 32
# https://next-auth.js.org/configuration/options#secret
# NEXTAUTH_SECRET=""
NEXTAUTH_URL="http://localhost:3000"
NEXTAUTH_SECRET="secret"

# Langfuse Cloud Environment
NEXT_PUBLIC_LANGFUSE_CLOUD_REGION="DEV"
# Dev-only: override the legacy blob-export cutoff date for local testing.
# Set to a past date (e.g. 2020-01-01T00:00:00.000Z) to make every project
# post-cutoff, or a future date (e.g. 2099-01-01T00:00:00.000Z) to grandfather
# all projects. Must be a valid ISO 8601 datetime string. Leave unset in prod.
# NEXT_PUBLIC_LANGFUSE_BLOB_EXPORT_CUTOFF=

# Langfuse experimental features
LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES="false"
LANGFUSE_ENABLE_WEB_CALLOUTS="true"

# Salt for API key hashing
SALT="salt"

# Email
EMAIL_FROM_ADDRESS=""  # Defines the email address to use as the from address.
SMTP_CONNECTION_URL=""  # Defines the connection url for smtp server.
CLOUD_CRM_EMAIL=""  # Optional BCC address for usage threshold emails (e.g., for CRM integration like HubSpot)

# S3 Batch Exports
LANGFUSE_S3_BATCH_EXPORT_ENABLED=true
LANGFUSE_S3_BATCH_EXPORT_BUCKET=langfuse
LANGFUSE_S3_BATCH_EXPORT_ACCESS_KEY_ID=minio
LANGFUSE_S3_BATCH_EXPORT_SECRET_ACCESS_KEY=miniosecret
LANGFUSE_S3_BATCH_EXPORT_REGION=us-east-1
LANGFUSE_S3_BATCH_EXPORT_ENDPOINT=http://localhost:9090
## Necessary for minio compatibility
LANGFUSE_S3_BATCH_EXPORT_FORCE_PATH_STYLE=true
LANGFUSE_S3_BATCH_EXPORT_PREFIX=exports/

# S3 Media Upload LOCAL
LANGFUSE_S3_MEDIA_UPLOAD_BUCKET=langfuse
LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID=minio
LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY=miniosecret
LANGFUSE_S3_MEDIA_UPLOAD_REGION=us-east-1
LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT=http://localhost:9090
## Necessary for minio compatibility
LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE=true
LANGFUSE_S3_MEDIA_UPLOAD_PREFIX=media/

# S3 Event Bucket Upload
## Optional: ingestion + eval-generated scores persist to GreptimeDB raw_events. The event bucket is
## only needed when LANGFUSE_EVENT_STORAGE_BACKEND=s3 (OTel carrier + eval blobs); not required to run.
LANGFUSE_S3_EVENT_UPLOAD_BUCKET=langfuse
LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID=minio
LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY=miniosecret
LANGFUSE_S3_EVENT_UPLOAD_REGION=us-east-1
LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT=http://localhost:9090
## Necessary for minio compatibility
LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE=true
LANGFUSE_S3_EVENT_UPLOAD_PREFIX=events/

# Object storage is optional. To run with NO MinIO/S3, switch media and the eval observation blob
# store to the local-file backend (and skip the minio service):
# LANGFUSE_MEDIA_STORAGE_BACKEND=local
# LANGFUSE_MEDIA_LOCAL_PATH=/tmp/langfuse/media
# LANGFUSE_EVENT_STORAGE_BACKEND=local
# LANGFUSE_EVENT_LOCAL_PATH=/tmp/langfuse/events

# Set during docker build of application
# Used to disable environment verification at build time
# DOCKER_BUILD=1

REDIS_HOST="127.0.0.1"
REDIS_PORT=6379
REDIS_AUTH="myredissecret"
# REDIS_KEY_PREFIX=""  # Optional: Prefix for Redis keys (useful for multi-tenant Redis instances)
                       # BullMQ queues will use this via BullMQ's native prefix option
                       # Cache operations will use this via ioredis keyPrefix
# LANGFUSE_BULLMQ_SKIP_REDIS_VERSION_CHECK="false"  # Set to true for Redis-compatible services that report a non-Redis version
# REDIS_SENTINEL_ENABLED="false"
# REDIS_SENTINEL_NODES="sentinel1:26379,sentinel2:26379"
# REDIS_SENTINEL_MASTER_NAME="mymaster"
# REDIS_SENTINEL_USERNAME=""
# REDIS_SENTINEL_PASSWORD=""

# openssl rand -hex 32 used only here
ENCRYPTION_KEY=0000000000000000000000000000000000000000000000000000000000000000

# speeds up local development by not executing init scripts on server startup
NEXT_PUBLIC_LANGFUSE_RUN_NEXT_INIT="false"

# For SDK integration tests to pass, decrease the ingestion queue delay by uncommenting the env vars:
# LANGFUSE_INGESTION_QUEUE_DELAY_MS=10
# LANGFUSE_INGESTION_WRITE_INTERVAL_MS=10
# LANGFUSE_EVAL_EXECUTION_WORKER_CONCURRENCY=5
# LANGFUSE_LLM_AS_JUDGE_EXECUTION_WORKER_CONCURRENCY=5

# Code-based eval dispatchers. Local dev defaults to the insecure in-process dispatcher.
# To explicitly use the local dispatcher, set:
# LANGFUSE_CODE_EVAL_DISPATCHER=insecure-local
# To test the AWS Lambda dispatcher against Floci, set:
# LANGFUSE_CODE_EVAL_DISPATCHER=aws-lambda
# LANGFUSE_CODE_EVAL_AWS_LAMBDA_ENDPOINT=http://localhost:4566
# Override Lambda function names if your deployment uses non-default names:
# LANGFUSE_CODE_EVAL_AWS_LAMBDA_NODE_FUNCTION_NAME=code-based-eval-executor-node
# LANGFUSE_CODE_EVAL_AWS_LAMBDA_PYTHON_FUNCTION_NAME=code-based-eval-executor-python
# Override the local dispatcher execution timeout (default: 2000ms):
# LANGFUSE_CODE_EVAL_LOCAL_TIMEOUT_MS=2000

# Slack credentials for development
SLACK_CLIENT_ID=your_slack_client_id
SLACK_CLIENT_SECRET=your_slack_client_secret
SLACK_STATE_SECRET=your_slack_state_secret

# Langfuse AI instance for tracing, prompts
LANGFUSE_AI_FEATURES_PUBLIC_KEY="pk-lf-1234567890"
LANGFUSE_AI_FEATURES_SECRET_KEY="sk-lf-1234567890"
LANGFUSE_AI_FEATURES_HOST="http://localhost:3000"
LANGFUSE_AI_FEATURES_PROJECT_ID=7a88fb47-b4e2-43b8-a06c-a5ce950dc53a

# Self-hosted only: allow internal LLM proxy hosts/IPs for LLM connection base URLs.
# LANGFUSE_LLM_CONNECTION_WHITELISTED_HOST=localhost
# LANGFUSE_LLM_CONNECTION_WHITELISTED_IPS=127.0.0.1,::1
# LANGFUSE_LLM_CONNECTION_WHITELISTED_IP_SEGMENTS=127.0.0.0/8
# Self-hosted only: allow internal hosts/IPs for user-configured blob storage endpoints.
# LANGFUSE_BLOB_STORAGE_ENDPOINT_WHITELISTED_HOST=localhost
# LANGFUSE_BLOB_STORAGE_ENDPOINT_WHITELISTED_IPS=127.0.0.1,::1
# LANGFUSE_BLOB_STORAGE_ENDPOINT_WHITELISTED_IP_SEGMENTS=127.0.0.0/8

# Langfuse AI Bedrock credentials
AWS_ACCESS_KEY_ID="A123456789"
AWS_SECRET_ACCESS_KEY="SAK123456789"
LANGFUSE_LLM_CONNECTION_BEDROCK_API_KEY="1234567890abcdef"
LANGFUSE_AWS_BEDROCK_REGION="eu-west-1"
LANGFUSE_AWS_BEDROCK_MODEL="eu.anthropic.claude-haiku-4-5-20251001-v1:0"
LANGFUSE_IN_APP_AGENT_AWS_PROFILE="playground"

# V4 migration flags.
# Write target: `legacy` | `dual` | `events_only`.
LANGFUSE_MIGRATION_V4_WRITE_MODE=dual
# OTel ingestion behaviour: `dual_write` (SDK-version dispatch) or `direct`.
LANGFUSE_MIGRATION_V4_NATIVE_OTEL_BEHAVIOUR=dual_write

# Legacy tracing UI controls
LANGFUSE_DISABLE_LEGACY_TRACING_IO_SEARCH=false