InsForge/.env.example at main · bobtryingtocode/InsForge · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
# Server Configuration
PORT=7130

# PostgreSQL Configuration (optional - defaults shown)
POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres
POSTGRES_DB=insforge

API_BASE_URL=http://localhost:7130
VITE_API_BASE_URL=http://localhost:7130

# Authentication
JWT_SECRET=your-secret-key-here-must-be-32-char-or-above
ADMIN_EMAIL=admin@example.com
ADMIN_PASSWORD=change-this-password

# Encryption key for secrets and database encryption (will use JWT_SECRET if not provided)
ENCRYPTION_KEY=

# API Key (must start with ik_ )
# optional - will be auto-generated if not provided)
ACCESS_API_KEY=ik_your-api-key-here-32-chars-minimum

# Cloud API Host (Optional)
CLOUD_API_HOST=https://api.insforge.dev


# Storage + Logs Configuration
# Storage: Set AWS_S3_BUCKET, AWS_REGION + credentials to use S3 (otherwise uses local filesystem).
# Logs: Set AWS_REGION + AWS credentials to enable CloudWatch logging (otherwise uses file-based logging)
# AWS credentials (used by CloudWatch logging, and as fallback for storage if S3_* not set)
AWS_ACCESS_KEY_ID=
AWS_REGION=
AWS_S3_BUCKET=
AWS_SECRET_ACCESS_KEY=
# Max upload file size in bytes (default: 52428800 = 50MB)
MAX_FILE_SIZE=
# S3-compatible storage credentials (for Wasabi, MinIO, etc. — falls back to AWS_* if not set)
S3_ACCESS_KEY_ID=
S3_ENDPOINT_URL=
S3_SECRET_ACCESS_KEY=

# File-based Logs Configuration (used when AWS credentials are not provided)
# Directory where log files will be stored (defaults to ./logs)
LOGS_DIR=


# OpenRouter Configuration
# Get your API key from https://openrouter.ai/keys
OPENROUTER_API_KEY=

# Posthog Configuration (Only needed if running development mode locally)
VITE_PUBLIC_POSTHOG_KEY=

# OAuth Configuration (Optional)
# Google OAuth - Get credentials from https://console.cloud.google.com/
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=

# GitHub OAuth - Get credentials from https://github.com/settings/developers
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=

#Microsoft OAuth - Get credentials from https://portal.azure.com/
MICROSOFT_CLIENT_ID=
MICROSOFT_CLIENT_SECRET=

# Discord OAuth - Get credentials from https://discord.com/developers/applications
DISCORD_CLIENT_ID=
DISCORD_CLIENT_SECRET=

# LinkedIn OAuth - Get credentials from https://www.linkedin.com/developers/apps
LINKEDIN_CLIENT_ID=
LINKEDIN_CLIENT_SECRET=

# X OAuth - Get credentials from https://developer.twitter.com/en/portal/dashboard
X_CLIENT_ID=
X_CLIENT_SECRET=

# Apple OAuth - Get credentials from https://developer.apple.com/account/resources/identifiers/list
# APPLE_CLIENT_ID is your Services ID (e.g., com.yourapp.service)
# APPLE_CLIENT_SECRET must be a JSON string with teamId, keyId, and privateKey (PKCS#8 PEM format from .p8 file)
APPLE_CLIENT_ID=
APPLE_CLIENT_SECRET=

# Multi-tenant Cloud Configuration
# Below only used through cloud available solution
DEPLOYMENT_ID=
PROJECT_ID=
APP_KEY=

# Deno Subhosting Configuration (for serverless functions)
# Get your token from https://dash.deno.com/account#access-tokens
# Get your org ID from your Deno Deploy dashboard
DENO_SUBHOSTING_TOKEN=
DENO_SUBHOSTING_ORG_ID=