.env.example

# ============================================================================
# DataStoria Environment Variables
# ============================================================================
# Copy this file to .env and configure your settings
# cp .env.example .env

# Set app for better SEO
#NEXT_PUBLIC_APP_URL=https://datastoria.app

# Optional base path when deploying behind a reverse proxy context path (e.g. /v2 or /app).
# Leave empty for root deployment.
# IMPORTANT: Next.js basePath is applied at build time only. You must set this when running
# `npm run build` and when building the Docker image (e.g. --build-arg NEXT_PUBLIC_BASE_PATH=/v2).
#NEXT_PUBLIC_BASE_PATH=/app

# Enable connection template provider UI section (default DISABLED)
# If enabled, you should update the implementation of /api/connection/templates to your own
NEXT_PUBLIC_CONSOLE_CONNECTION_PROVIDER_ENABLED=false

# ============================================================================
#
# CODE ANALYSIS (Optional)
#
# ============================================================================
# Configure a source repository that the AI chat can inspect in read-only mode.
# If CLICKHOUSE_CODE_REPO_LOCAL already exists, it is used as-is and download is skipped.
# If it does not exist and CLICKHOUSE_CODE_REPO_REMOTE is set, the app will start cloning it in the
# background on startup and continue code-analysis warmup without blocking API requests.
# CLICKHOUSE_CODE_REPO_REMOTE=https://github.com/ClickHouse/ClickHouse.git
# CLICKHOUSE_CODE_REPO_LOCAL=/absolute/path/to/local/source
# Optional caps to keep tool output bounded.
# CODE_ANALYSIS_MAX_FILE_BYTES=65536
# CODE_ANALYSIS_MAX_READ_LINES=250
# CODE_ANALYSIS_MAX_SEARCH_RESULTS=20
# Optional comma-separated directory names to include in code search and code viewer file listing.
# Defaults to src. Set to * (or an empty value) to search all names. .git and node_modules
# are always skipped.
# CODE_ANALYSIS_INCLUDE_NAMES=src
# Optional comma-separated file suffixes eligible for code search and code viewer file listing.
# Entries may be written with or without the leading dot; matching is case-insensitive.
# Use * to allow every suffix. If unset, a C/C++-oriented default list is used.
# CODE_ANALYSIS_SEARCH_SUFFIXES=.c,.cc,.cpp,.cxx,.h,.hh,.hpp,.hxx,.inl,.ipp

# ============================================================================
#
# CHAT SESSION REPOSITORY (Optional remote persistence)
#
# ============================================================================
# Configure exactly one of the following to enable server-side chat persistence.
# Priority order: MYSQL > POSTGRES > SQLITE.
# CHAT_SESSION_REPOSITORY_MYSQL_URL=mysql://username:password@127.0.0.1:3306/datastoria_chat
# CHAT_SESSION_REPOSITORY_POSTGRES_URL=postgres://username:password@127.0.0.1:5432/datastoria_chat
# CHAT_SESSION_REPOSITORY_SQLITE_PATH=/absolute/path/to/chat-sessions.sqlite
# Optional retention policy for backend cleanup scheduler (default: 30 days)
# CHAT_SESSION_REPOSITORY_RETENTION_DAYS=30
#
# Skill editing uses the same server-side database storage configuration above.
# Editing is available only to authenticated users when one of the repository URLs/paths is set.
# If SKILL_EDITOR_WHITELIST is empty or unset, any authenticated user can edit skills.
# If SKILL_EDITOR_WHITELIST is non-empty, only listed email addresses can edit.
# Comma-separated list, example:
# SKILL_EDITOR_WHITELIST=alice@example.com,bob@example.com
# SKILL_EDITOR_WHITELIST=

# ============================================================================
#
# LLM Models API Key Settings(for AI features)
#
# ============================================================================
# Anthropic API Key
# Get your API key from: https://console.anthropic.com/
# ANTHROPIC_API_KEY=

# OpenAI API Key (optional fallback)
# Get your API key from: https://platform.openai.com/api-keys
# OPENAI_API_KEY=

# https://openrouter.ai/docs/api/reference/limits
# OPENROUTER_API_KEY=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

#https://console.groq.com/keys
# GROQ_API_KEY=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


#Google Gemini
#GOOGLE_GENERATIVE_AI_API_KEY=

# Cerebras
#CEREBRAS_API_KEY=


# ============================================================================
#
# AUTHENTICATION CONFIGURATION (Optional)
#
# ============================================================================
# Authentication is optional. If no providers are configured, the app will
# run without authentication.

# ----------------------------------------------------------------------------
# Anonymous Access
# ----------------------------------------------------------------------------
# Set to "false" to require authentication (no anonymous users).
# When "false", at least one OAuth provider must be configured or the app will exit.
# When true or unset, anonymous users can access the app.
ALLOW_ANONYMOUS_USER=true

# ----------------------------------------------------------------------------
# NextAuth Secret (Required if authentication is enabled)
# ----------------------------------------------------------------------------
# Generate a random secret with: openssl rand -base64 32
# This secret is used for JWT encryption and session management
NEXTAUTH_SECRET=your-secret-key-here-replace-with-random-32-char-string

# ----------------------------------------------------------------------------
# Google OAuth Provider
# ----------------------------------------------------------------------------
# Provider is enabled when credentials are set AND NEXTAUTH_GOOGLE_ENABLED=true.
# Get credentials from: https://console.cloud.google.com/apis/credentials
# 1. Create a new OAuth 2.0 Client ID
# 2. Add authorized redirect URI: http://localhost:3000/api/auth/callback/google
# 3. Copy the Client ID and Client Secret
NEXTAUTH_GOOGLE_ENABLED=false
# GOOGLE_CLIENT_ID=your-google-client-id.apps.googleusercontent.com
# GOOGLE_CLIENT_SECRET=your-google-client-secret

# ----------------------------------------------------------------------------
# GitHub OAuth Provider
# ----------------------------------------------------------------------------
# Provider is enabled when credentials are set AND NEXTAUTH_GITHUB_ENABLED=true.
# Get credentials from: https://github.com/settings/developers
# 1. Click "New OAuth App"
# 2. Set Authorization callback URL: http://localhost:3000/api/auth/callback/github
# 3. Copy the Client ID and generate a Client Secret
NEXTAUTH_GITHUB_ENABLED=false
# GITHUB_CLIENT_ID=your-github-client-id
# GITHUB_CLIENT_SECRET=your-github-client-secret

# ----------------------------------------------------------------------------
# Microsoft Entra ID (Azure AD) OAuth Provider
# ----------------------------------------------------------------------------
# Provider is enabled when credentials are set AND NEXTAUTH_MICROSOFT_ENABLED=true.
# Get credentials from: https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps
# 1. Register a new application
# 2. Add redirect URI: http://localhost:3000/api/auth/callback/microsoft-entra-id
# 3. Create a client secret
# 4. Copy the Application (client) ID, Directory (tenant) ID, and client secret
NEXTAUTH_MICROSOFT_ENABLED=false
# MICROSOFT_CLIENT_ID=your-microsoft-client-id
# MICROSOFT_CLIENT_SECRET=your-microsoft-client-secret
# MICROSOFT_TENANT_ID=your-microsoft-tenant-id

# ----------------------------------------------------------------------------
# GitHub App for Copilot Device Flow(for Copilot model usage)
# ----------------------------------------------------------------------------
# 1. Create a "New GitHub App" (not OAuth App)
# 2. Set "Device flow" enabled in General settings
# 3. Copy the Client ID
GITHUB_COPILOT_CLIENT_ID=your-github-copilot-client-id