-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path.env.example
More file actions
65 lines (56 loc) · 2.08 KB
/
Copy path.env.example
File metadata and controls
65 lines (56 loc) · 2.08 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
# SpecCursor environment template
# Copy to .env (local), .env.staging, or .env.production — never commit real secrets.
#
# APP_ENV selects the deploy profile used by fail-closed secret checks:
# development | staging | production
# NODE_ENV remains Node semantics (development | test | production).
APP_ENV=development
NODE_ENV=development
LOG_LEVEL=info
# --- Ports (local process defaults; compose overrides per service) ---
# controller: 3001, ai-service: 3002, github-app: 3000
PORT=3000
# --- Postgres ---
# Local docker-compose default (development only). Staging/production MUST NOT
# use the speccursor_dev password — startup asserts reject it.
DATABASE_URL=postgresql://speccursor:speccursor_dev@localhost:5432/speccursor
# DB_HOST=localhost
# DB_PORT=5432
# DB_NAME=speccursor
# DB_USER=speccursor
# DB_PASSWORD=
# DB_SSL=true
# DB_SSL_REJECT_UNAUTHORIZED=true
# --- Redis ---
REDIS_URL=redis://localhost:6379
# REDIS_HOST=localhost
# REDIS_PORT=6379
# REDIS_PASSWORD=
# --- Anthropic / Claude (ai-service, scripts/ai-patch.ts) ---
# Required in staging/production. Local: empty boots, requests fail closed.
ANTHROPIC_API_KEY=
# Deprecated alias (still accepted if ANTHROPIC_API_KEY unset):
# CLAUDE_API_KEY=
CLAUDE_MODEL=claude-sonnet-4-20250514
CLAUDE_MAX_TOKENS=4096
CLAUDE_TEMPERATURE=0.1
CLAUDE_TIMEOUT=30000
# --- GitHub App (github-app) ---
# Required in staging/production. Local webhook verification still needs
# GITHUB_WEBHOOK_SECRET; Octokit calls fail closed without app credentials.
GITHUB_APP_ID=
GITHUB_PRIVATE_KEY=
GITHUB_WEBHOOK_SECRET=
# Legacy alias for webhook secret (prefer GITHUB_WEBHOOK_SECRET):
# WEBHOOK_SECRET=
# --- Auth ---
# Required for github-app in staging/production. Never use your-secret-key.
JWT_SECRET=
# --- Optional observability ---
# METRICS_ENABLED=true
# TRACING_ENABLED=true
# JAEGER_ENDPOINT=http://localhost:14268/api/traces
# ALLOWED_ORIGINS=https://example.com
# --- CI-only (GitHub Actions repository secrets; not used by local compose) ---
# SNYK_TOKEN= # optional; qualify.yml skips Snyk when unset
# CODECOV_TOKEN= # unused by primary CI