-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathenv.example
More file actions
146 lines (112 loc) · 4.89 KB
/
Copy pathenv.example
File metadata and controls
146 lines (112 loc) · 4.89 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
# =============================================================================
# MOLTBOT ENVIRONMENT VARIABLES - Template
# =============================================================================
# Copy this file to .env and fill in your values
# NEVER commit .env files with real credentials to version control
#
# On Railway: Set these in the Variables tab, not in a file
# =============================================================================
# -----------------------------------------------------------------------------
# REQUIRED - Railway Deployment
# -----------------------------------------------------------------------------
# Password for /setup wizard (generate: openssl rand -base64 24)
SETUP_PASSWORD=
# Gateway authentication token (generate: openssl rand -base64 48)
# SECURITY: Use 64+ characters for production
CLAWDBOT_GATEWAY_TOKEN=
# -----------------------------------------------------------------------------
# REQUIRED - AI Provider (at least one)
# -----------------------------------------------------------------------------
# Anthropic (Recommended) - https://console.anthropic.com/
ANTHROPIC_API_KEY=sk-ant-
# OpenAI - https://platform.openai.com/api-keys
# OPENAI_API_KEY=sk-
# OPENAI_ORG_ID=
# OpenRouter - https://openrouter.ai/keys
# OPENROUTER_API_KEY=sk-or-
# Google (Gemini) - https://makersuite.google.com/app/apikey
# GOOGLE_AI_API_KEY=
# GOOGLE_CLOUD_PROJECT=
# Groq - https://console.groq.com/keys
# GROQ_API_KEY=gsk-
# -----------------------------------------------------------------------------
# OPTIONAL - Channel Credentials
# -----------------------------------------------------------------------------
# Telegram - Get from @BotFather
# TELEGRAM_BOT_TOKEN=123456:ABC-DEF...
# TELEGRAM_WEBHOOK_URL=https://your-domain.railway.app/telegram/webhook
# Discord - https://discord.com/developers/applications
# DISCORD_BOT_TOKEN=
# DISCORD_CLIENT_ID=
# DISCORD_CLIENT_SECRET=
# Slack - https://api.slack.com/apps
# SLACK_BOT_TOKEN=xoxb-
# SLACK_APP_TOKEN=xapp-
# SLACK_SIGNING_SECRET=
# Signal - Configured via Control UI QR code (no env vars needed)
# WhatsApp - Configured via Control UI QR code (no env vars needed)
# -----------------------------------------------------------------------------
# OPTIONAL - Voice & Speech
# -----------------------------------------------------------------------------
# ElevenLabs - https://elevenlabs.io/
# ELEVENLABS_API_KEY=
# ELEVENLABS_VOICE_ID=
# -----------------------------------------------------------------------------
# OPTIONAL - Search & Web
# -----------------------------------------------------------------------------
# Brave Search - https://brave.com/search/api/
# BRAVE_SEARCH_API_KEY=
# Serper - https://serper.dev/
# SERPER_API_KEY=
# -----------------------------------------------------------------------------
# OPTIONAL - Skills
# -----------------------------------------------------------------------------
# GitHub - https://github.com/settings/tokens
# GITHUB_TOKEN=ghp_
# Notion - https://www.notion.so/my-integrations
# NOTION_API_KEY=secret_
# -----------------------------------------------------------------------------
# OPTIONAL - Railway Configuration
# -----------------------------------------------------------------------------
# Port (Railway manages this automatically)
# PORT=8080
# State directory (default: /data/.clawdbot)
# CLAWDBOT_STATE_DIR=/data/.clawdbot
# Workspace directory (default: /data/workspace)
# CLAWDBOT_WORKSPACE_DIR=/data/workspace
# Custom config path
# CLAWDBOT_CONFIG_PATH=/data/.clawdbot/moltbot.json
# Internal gateway settings (rarely need to change)
# INTERNAL_GATEWAY_HOST=127.0.0.1
# INTERNAL_GATEWAY_PORT=18789
# Shell environment import (disabled by default for security)
# CLAWDBOT_LOAD_SHELL_ENV=0
# CLAWDBOT_SHELL_ENV_TIMEOUT_MS=15000
# -----------------------------------------------------------------------------
# OPTIONAL - Monitoring & Logging
# -----------------------------------------------------------------------------
# Log drain endpoint for external aggregation
# LOG_DRAIN_URL=https://logs.example.com/ingest
# Backup encryption password
# BACKUP_PASSWORD=
# Webhook secret for custom integrations
# WEBHOOK_SECRET=
# =============================================================================
# SECURITY REMINDERS
# =============================================================================
# 1. Generate secure tokens:
# - SETUP_PASSWORD: openssl rand -base64 24
# - CLAWDBOT_GATEWAY_TOKEN: openssl rand -base64 48
#
# 2. Rotation schedule:
# - SETUP_PASSWORD: After each admin access
# - CLAWDBOT_GATEWAY_TOKEN: Monthly
# - AI API keys: Quarterly
# - Channel tokens: After any incident
#
# 3. If credentials leak:
# - Rotate immediately at the provider
# - Update Railway environment variables
# - Redeploy the service
# - Audit logs for unauthorized access
# =============================================================================