legate-agent/.env.example at main · sanmaxdev/legate-agent · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
# ---------------------------------------------------------------------------
# Legate Agent — example environment configuration
# Copy to .env and fill in real values. NEVER commit a real .env.
# ---------------------------------------------------------------------------

# Core
LEGATE_ENV=development
LEGATE_SECRET_KEY=change-me-to-a-long-random-string
LEGATE_MASTER_KEY=                 # base64 32-byte key for the credential vault
API_BASE_URL=http://localhost:8000
WEB_BASE_URL=http://localhost:3000
# Comma-separated CORS origins for the dashboard (defaults to WEB_BASE_URL).
CORS_ORIGINS=http://localhost:3000

# Database
DATABASE_URL=postgresql+psycopg://legate:legate@postgres:5432/legate
REDIS_URL=redis://redis:6379/0
QDRANT_URL=http://qdrant:6333

# Auth
JWT_ACCESS_TTL_MIN=15
JWT_REFRESH_TTL_DAYS=30

# LLM provider (provider-agnostic)
LLM_PROVIDER=openrouter            # openrouter | ollama (more in later phases)
LLM_API_KEY=
LLM_DEFAULT_MODEL=
OPENROUTER_BASE_URL=https://openrouter.ai/api/v1
OLLAMA_BASE_URL=http://localhost:11434
OPENAI_BASE_URL=https://api.openai.com/v1
EMBEDDING_PROVIDER=openai          # openai | hashing (offline, for dev/CI)
EMBEDDING_MODEL=text-embedding-3-small
EMBEDDING_DIM=256                  # dimensionality used by the hashing embedder

# Vector store (RAG)
VECTOR_STORE_BACKEND=qdrant        # qdrant | memory (in-process, for dev/CI)

# Object storage
STORAGE_BACKEND=local              # local | s3
STORAGE_LOCAL_DIR=./data/storage
S3_ENDPOINT=
S3_BUCKET=
S3_ACCESS_KEY=
S3_SECRET_KEY=

# Limits and safety
RUN_MAX_STEPS=25
RUN_MAX_TOKENS=200000
RUN_MAX_WALLCLOCK_SEC=600
# Block outbound connector/MCP requests to private, loopback, and link-local
# addresses (SSRF protection). Set true only on trusted single-tenant deploys
# that must reach internal endpoints.
ALLOW_PRIVATE_CONNECTOR_URLS=false
# When true, agent runs execute inline instead of in the background (tests/dev).
AGENT_RUN_INLINE=false
# When true, document ingestion runs inline instead of via a Celery task (tests/dev).
KB_INGEST_INLINE=false
# When true, workflow runs execute inline instead of in the background (tests/dev).
WORKFLOW_RUN_INLINE=false

# --- Enterprise (Phase 8) --------------------------------------------------
# Billing & plans
BILLING_ENABLED=false
DEFAULT_PLAN=free
STRIPE_API_KEY=
STRIPE_WEBHOOK_SECRET=

# SSO (OIDC)
OIDC_ENABLED=false
OIDC_CLIENT_ID=
OIDC_CLIENT_SECRET=
OIDC_REDIRECT_URI=http://localhost:8000/auth/oidc/callback
OIDC_AUTHORIZATION_ENDPOINT=
OIDC_TOKEN_ENDPOINT=
OIDC_USERINFO_ENDPOINT=
OIDC_SCOPES=openid email profile

# Rate limiting
RATE_LIMIT_ENABLED=false
RATE_LIMIT_RUNS_PER_MINUTE=30

# Observability
METRICS_ENABLED=true
OTEL_SERVICE_NAME=legate-api
OTEL_EXPORTER_OTLP_ENDPOINT=
# How long a pending approval stays valid before it auto-expires (0 = never).
APPROVAL_TTL_HOURS=24