agents/.env.docker.example at main · inkeep/agents · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
############################################################
# REQUIRED ENVIRONMENT VARIABLES
############################################################

# Change to "development" if deploying to dev
ENVIRONMENT=production

# (1) AI Provider Keys (you need at least one)
ANTHROPIC_API_KEY=
OPENAI_API_KEY=
GOOGLE_GENERATIVE_AI_API_KEY=
AZURE_API_KEY=

# (2) From Nango dashboard at http://<vm_ip>:3050
NANGO_SECRET_KEY=

# (3) From SigNoz dashboard at http://<vm_ip>:3080
SIGNOZ_API_KEY=

# (4) Set these for the Manage UI at http://<vm_ip>:3000
PUBLIC_INKEEP_AGENTS_API_URL=http://<vm_ip>:3002
PUBLIC_NANGO_SERVER_URL=http://<vm_ip>:3050
PUBLIC_NANGO_CONNECT_BASE_URL=http://<vm_ip>:3051
PUBLIC_SIGNOZ_URL=http://<vm_ip>:3080

# (5) Set these for Agents API
INKEEP_AGENTS_MANAGE_UI_URL=http://<vm_ip>:3000
INKEEP_AGENTS_API_URL=http://<vm_ip>:3002
INKEEP_AGENTS_RUN_API_BYPASS_SECRET=<REPLACE_WITH_INKEEP_AGENTS_RUN_API_BYPASS_SECRET>

# Credentials for the initial admin user created during setup
INKEEP_AGENTS_MANAGE_UI_USERNAME=admin@example.com
INKEEP_AGENTS_MANAGE_UI_PASSWORD=<REPLACE_WITH_INKEEP_AGENTS_MANAGE_UI_PASSWORD>

# Generated with: openssl rand -base64 32
INKEEP_AGENTS_JWT_SIGNING_SECRET=<REPLACE_WITH_INKEEP_AGENTS_JWT_SIGNING_SECRET>
BETTER_AUTH_SECRET=<REPLACE_WITH_BETTER_AUTH_SECRET>
SPICEDB_PRESHARED_KEY=<REPLACE_WITH_SPICEDB_PRESHARED_KEY>

INKEEP_AGENTS_TEMP_JWT_PRIVATE_KEY=<REPLACE_WITH_INKEEP_AGENTS_TEMP_JWT_PRIVATE_KEY>
INKEEP_AGENTS_TEMP_JWT_PUBLIC_KEY=<REPLACE_WITH_INKEEP_AGENTS_TEMP_JWT_PUBLIC_KEY>

############################################################
# OPTIONAL: COPILOT (Chat-to-Edit)
############################################################
# When set, any authenticated user can access the copilot agent
# without being a member of its tenant or having SpiceDB permissions.
# INKEEP_COPILOT_TENANT_ID=
# INKEEP_COPILOT_PROJECT_ID=
# INKEEP_COPILOT_AGENT_ID=

############################################################
# OPTIONAL: SLACK APP CONFIGURATION
############################################################
# Enable Work Apps section in the dashboard (Slack, etc.)
# NEXT_PUBLIC_ENABLE_WORK_APPS=true

# Get credentials from: https://api.slack.com/apps → Your App → Basic Information
# SLACK_CLIENT_ID=
# SLACK_CLIENT_SECRET=
# SLACK_SIGNING_SECRET=
# Your public URL for OAuth redirect
# SLACK_APP_URL=https://your-app.example.com


############################################################
# OPTIONAL: BLOB STORAGE CONFIGURATION
############################################################
# Used for persisting images and media from conversations.
# Provider selection order:
# 1) S3 when BLOB_STORAGE_S3_BUCKET is set
#    May use any S3 compatible storage (AWS S3, Cloudflare R2, Google Cloud, Backblaze B2, DigitalOcean Spaces, etc.)
# 2) Vercel Blob when BLOB_READ_WRITE_TOKEN is set
# 3) Local filesystem fallback when neither of the above are set. Set BLOB_STORAGE_LOCAL_PATH to override default path for this directory.
# ===== Local filesystem configuration =====
BLOB_STORAGE_LOCAL_PATH=.blob-storage
# ===== Vercel Blob configuration =====
# BLOB_READ_WRITE_TOKEN=
# ===== S3 configuration =====
# Required for AWS S3:
# BLOB_STORAGE_S3_BUCKET=
# BLOB_STORAGE_S3_REGION=
# BLOB_STORAGE_S3_ACCESS_KEY_ID=
# BLOB_STORAGE_S3_SECRET_ACCESS_KEY=
# Optional for AWS S3 (may be required for S3-compatible providers):
# Custom endpoint URL. Often required for non-AWS providers (R2, MinIO, B2, Spaces, etc.).
# BLOB_STORAGE_S3_ENDPOINT=
# Path-style URLs. Default false for AWS S3. Some S3-compatible providers require true.
# BLOB_STORAGE_S3_FORCE_PATH_STYLE=false