Files
chat_backend/.env.example
T
westfarnandCursor c21f052d5b
CI / test (pull_request) Successful in 9s
Unit Tests / test (pull_request) Successful in 10s
Read attached chat images with a vision model.
Image uploads were treated as unknown documents and never shown to the model. PNG, JPEG, WebP, and GIF now go to Ollama vision, and history returns the image bytes.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-20 08:11:42 -05:00

142 lines
6.4 KiB
Bash

# Local development environment file (copy to .env).
# For production server values, use .env.prod.example instead.
DJANGO_ENV=dev
DJANGO_DEBUG=true
DJANGO_SECRET_KEY=change-me-for-local-development
DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1,0.0.0.0
# Optional; when unset, http:// origins are derived for local hosts.
# DJANGO_CSRF_TRUSTED_ORIGINS=http://localhost:8003,http://127.0.0.1:8003
# Database (docker-compose sets DATABASE_URL for the web service)
DATABASE_URL=postgres://chat_backend:chat_backend@db:5432/chat_backend
# Ollama — local loopback when Ollama runs on this machine; LAN IP for GPU host.
OLLAMA_BASE_URL=http://127.0.0.1:11434
# Legacy fallback (used when role-specific vars unset). Prefer the role vars.
# OLLAMA_MODEL=gpt-oss:20b
# OLLAMA_MODEL_THINKING=gpt-oss:20b
# OLLAMA_MODEL_FAST=gemma4:latest
# Vision (image + prompt). Must be a vision-capable tag. Default gemma4:latest.
# OLLAMA_MODEL_VISION=gemma4:latest
# OLLAMA_MODEL_UTILITY=llama3.2
# OLLAMA_EMBED_MODEL=nomic-embed-text
# OLLAMA_NUM_CTX_THINKING=16384
# OLLAMA_NUM_CTX_FAST=8192
# OLLAMA_NUM_CTX_UTILITY=4096
# Web search (#62) — SearxNG primary, DDGS failover. See README "SearxNG".
ALLOW_INTERNET_ACCESS=true
SEARCH_PROVIDER=searxng
SEARCH_FAILOVER_PROVIDER=ddgs
SEARXNG_BASE_URL=http://127.0.0.1:8088
# SEARXNG_TIMEOUT_SECONDS=8
# Email (SMTP2GO) — optional for local
EMAIL_HOST=mail.smtp2go.com
EMAIL_HOST_USER=
EMAIL_HOST_PASSWORD=
EMAIL_PORT=2525
EMAIL_USE_TLS=true
# Captcha (optional local)
CAPTCHA_SECRET_KEY=
# Password self-serve sign-up (default true). Set false to close /user/create/.
ENABLE_ACCOUNT_REGISTRATION=true
# Browser SSO. Leave false until Google / Microsoft sign-in should be public.
# Client ids below can still be set for Drive linking.
ENABLE_SSO=false
# OAuth SSO — Google / Microsoft (#24). Leave blank to hide SSO buttons.
# Redirect URIs (register in each IdP console):
# {OAUTH_CALLBACK_BASE_URL}/api/auth/oauth/google/callback/
# {OAUTH_CALLBACK_BASE_URL}/api/auth/oauth/microsoft/callback/
# Same client id/secret pair is reused for Drive linking (#47) — the extra
# Drive scopes below are requested incrementally via intent=link_drive /
# intent=link_company_drive, no separate app registration needed:
# Google: openid email profile https://www.googleapis.com/auth/drive.readonly
# Microsoft: openid email profile offline_access Files.Read (personal)
# openid email profile offline_access Files.Read.All Sites.Read.All (company)
GOOGLE_OAUTH_CLIENT_ID=
GOOGLE_OAUTH_CLIENT_SECRET=
MICROSOFT_OAUTH_CLIENT_ID=
MICROSOFT_OAUTH_CLIENT_SECRET=
MICROSOFT_OAUTH_TENANT=common
# Optional; defaults to request host. Example local: http://127.0.0.1:8001
OAUTH_CALLBACK_BASE_URL=http://127.0.0.1:8001
# Drive / RAG sync (#47-#53). Requires a subscription plan with allows_rag
# (Founders, Pro, Business, Backer by default — see finance PLAN_SEED).
# Start a link: GET /api/auth/oauth/google/start/?intent=link_drive (authenticated)
# GET /api/auth/oauth/google/start/?intent=link_company_drive (company manager)
# GET /api/auth/oauth/microsoft/start/?intent=link_drive
# GET /api/auth/oauth/microsoft/start/?intent=link_company_drive
# Manage: GET /api/drive/connections/
# DELETE /api/drive/connections/<id>/
# POST /api/drive/connections/<id>/resources/ { "resource_ids": [...] }
# POST /api/drive/connections/<id>/sync/
# Provider push notifications (best-effort; register with each provider's
# subscription/watch API pointing here, using ?connection_id=<id>):
# POST {OAUTH_CALLBACK_BASE_URL}/api/drive/webhooks/google/
# POST {OAUTH_CALLBACK_BASE_URL}/api/drive/webhooks/microsoft/
# Worker sync: `python manage.py sync_drive_connections [--connection-id N]`
# Stripe / monetization (optional local — required for checkout + webhooks)
STRIPE_SECRET_KEY=
STRIPE_PUBLISHABLE_KEY=
STRIPE_WEBHOOK_SECRET=
# Optional: pre-created Stripe Price ID for Founders. When empty, Checkout uses
# SubscriptionPlan.price_cents / SUBSCRIPTION_PRICE_* ($10 USD / month Founders).
STRIPE_PRICE_ID=
# Native store purchases (#78). iOS verifies the StoreKit signed transaction
# against Apple Root CA G3. Android calls the Play Developer API.
APPLE_IAP_BUNDLE_ID=ai.hesychia.chat
GOOGLE_PLAY_PACKAGE_NAME=ai.hesychia.chat
# Service-account JSON (one line) or a path to the JSON file. Empty disables Play confirm.
GOOGLE_PLAY_SERVICE_ACCOUNT_JSON=
# Optional JSON map of store product id → plan slug, e.g.
# REVENUECAT_PRODUCT_PLAN_MAP={"hesychia_founders_monthly":"founders"}
# SUBSCRIPTION_PRICE_AMOUNT_CENTS=1000
# SUBSCRIPTION_PRICE_CURRENCY=usd
# SUBSCRIPTION_PRICE_INTERVAL=month
# SUBSCRIPTION_PRODUCT_NAME=Founders
# Enforce plan feature + prompt/token quotas on chat turns (default true).
# ENFORCE_SUBSCRIPTION_GATES=true
FRONTEND_BASE_URL=http://localhost:3000
# Agentic task execution (#63) — long-running, multi-step, tool-using turns.
# Default false: chat behaves exactly like the always-on grounded path (#62),
# no planner/tools/AgentRun rows. Requires a plan with allows_rag (or
# allows_all_future_features) — see monetization SubscriptionPlan.allows_feature.
ALLOW_AGENTIC_TASKS=false
# Redis — optional. Unset = InMemory channel layer (single process, fine for
# dev/tests) and agent work runs on a daemon thread instead of Celery.
# REDIS_URL=redis://127.0.0.1:6379/0
# CELERY_BROKER_URL=redis://127.0.0.1:6379/0
# Orchestrator plans + synthesises; sub-agents run independent plan steps
# concurrently on a smaller/cheaper model.
# OLLAMA_MODEL_ORCHESTRATOR=gpt-oss:20b
# OLLAMA_MODEL_SUBAGENT=llama3.2
# AGENT_MAX_PLAN_STEPS=8
# AGENT_MAX_ITERATIONS=12
# AGENT_WALL_CLOCK_SECONDS=600
# AGENT_SUBAGENT_CONCURRENCY=3
# AGENT_TOOL_TIMEOUT_SECONDS=20
# AGENT_TOOL_OUTPUT_MAX_CHARS=8000
# AGENT_MAX_TOOL_CALLS_PER_RUN=40
# AGENT_FETCH_URL_MAX_BYTES=2097152
# Run a worker once REDIS_URL/CELERY_BROKER_URL are set:
# docker compose --profile agentic up redis worker
# uv run celery -A llm_be worker --loglevel=info
# STRIPE_CHECKOUT_SUCCESS_URL=http://localhost:3000/billing/success?session_id={CHECKOUT_SESSION_ID}
# STRIPE_CHECKOUT_CANCEL_URL=http://localhost:3000/billing/cancel
# Customer Portal return URL (plan change / cancel / payment method).
# STRIPE_PORTAL_RETURN_URL=http://localhost:3000/account/
# Gunicorn / ASGI
GUNICORN_WORKERS=2
GUNICORN_BIND=0.0.0.0:8000
# Host port for docker-compose.prod.yml
WEB_PORT=8003