arena/.env.template at master · openforis/arena · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
# Default web server port
ARENA_PORT=9090

# DB
## DATABASE_URL
DATABASE_URL=postgres://user:password@host:port/database
## OR
PGHOST=localhost
PGPORT=5444
PGDATABASE=arena
PGUSER=arena
PGPASSWORD=arena
PGSSL=false
PGSSL_ALLOW_UNAUTHORIZED=false
## DB DEBUG OUTPUT
DEBUG=false
## DB Migrations
DISABLE_DB_MIGRATIONS=false

# temp files
TEMP_FOLDER=/tmp/arena_upload

# FILES STORAGE
# (if both FILE_STORAGE_PATH and FILE_STORAGE_AWS_S3_BUCKET_NAME are not specified, files will be stored in DB)

# FILES STORAGE (file system)
# path of a folder in the file system used to store files (uncomment the following line to enable file system files storage)
# FILE_STORAGE_PATH=

# FILES STORAGE (AWS S3 Bucket) (uncomment the following lines to enable S3 bucket files storage)
# FILE_STORAGE_AWS_S3_BUCKET_NAME=
# FILE_STORAGE_AWS_S3_BUCKET_REGION=
# FILE_STORAGE_AWS_ACCESS_KEY=
# FILE_STORAGE_AWS_SECRET_ACCESS_KEY=

# Email
# email service; allowed values: sendgrid / office365 / amazonSES
# - sendgrid service: SENDGRID_API_KEY is required (and a sender address; see EMAIL_FROM/ADMIN_EMAIL/EMAIL_AUTH_USER)
# - office365 service: EMAIL_AUTH_USER and EMAIL_AUTH_PASSWORD are required (and a sender address; see below)
# - amazonSES service: EMAIL_AUTH_USER, EMAIL_AUTH_PASSWORD, and EMAIL_AMAZON_SES_HOST are required (port is optional; see EMAIL_AMAZON_SES_PORT)
EMAIL_SERVICE=sendgrid
# Email sender address (required for all services). If EMAIL_FROM is not set, the application will
# try to resolve it from ADMIN_EMAIL or EMAIL_AUTH_USER.
# EMAIL_FROM=
# For sendgrid service, the following variable is also required:
SENDGRID_API_KEY=
# For office365 service, the following variables are required:
# EMAIL_AUTH_USER=
# EMAIL_AUTH_PASSWORD=
# For amazonSES service, the following variable is also required:
# EMAIL_AMAZON_SES_HOST=
# Optional Amazon SES port: override default ports (587 for STARTTLS, 465 for TLS)
# EMAIL_AMAZON_SES_PORT=465
# Optional: custom email transport options could be specified.
# EMAIL_TRANSPORT_OPTIONS=
# e.g. (for MS office365 service) EMAIL_TRANSPORT_OPTIONS={"host":"smtp.office365.com","port":"587","auth":{"user":"testuser@mydomain.org","pass":"yoursecretpassword"},"secure":true}
# Support email address shown to users in emails (e.g. to report an access request they didn't make).
# If not set, it falls back to ADMIN_EMAIL.
# SUPPORT_EMAIL=

# Analysis
ANALYSIS_OUTPUT_DIR=/tmp/arena_analysis

# Server
## Set to true if http requests must be forwarded to https
USE_HTTPS=false
## Maximum file upload size in bytes (default: 1073741824 = 1GB)
FILE_UPLOAD_LIMIT=1073741824
## User auth token secret:
## IMPORTANT: Use a strong random secret in production (e.g., 64+ character random string)
USER_AUTH_TOKEN_SECRET=my-auth-token-secret-key
## User 2FA secret
## IMPORTANT: Use a strong random secret in production (e.g., 64+ character random string)
USER_2FA_SECRET=my-strong-random-2fa-secret

# RStudio Server
RSTUDIO_DOWNLOAD_SERVER_URL=
RSTUDIO_SERVER_URL=
RSTUDIO_PROXY_SERVER_URL=
RSTUDIO_POOL_SERVER_URL=
RSTUDIO_POOL_SERVICE_KEY=

# TEST
HEADLESS_CHROME=true

# ReCaptcha
RECAPTCHA_ENABLED=false
RECAPTCHA_SITE_KEY=
RECAPTCHA_SECRET_KEY=

# MAP
## Planet Lab Maps API key
MAP_API_KEY_PLANET=

# System Admin user email address
# used to create default system admin user when DB is empty
# and to send emails to the users
ADMIN_EMAIL=
# Admin user password: used only when default system admin user is created the first time
# it MUST BE DELETED after the first startup
ADMIN_PASSWORD=
# Allow user access request
# if set to true, the system will allow users to request access to the system
ALLOW_USER_ACCESS_REQUEST=true

# Experimental features
# if set to true, experimental features will be enabled in the UI
EXPERIMENTAL_FEATURES=false

# Job Queue
## Maximum number of concurrent jobs
JOB_QUEUE_CONCURRENCY=

# Activity log
## If set to true, activity log will be disabled
ACTIVITY_LOG_DISABLED=false

# WHISP
WHISP_API_KEY=

# ===== AI features =====
# Master switch. When false, all /api/ai/* endpoints return 404.
AI_FEATURES_ENABLED=false

# Default provider (used when a user has no per-account override).
# Allowed: anthropic | google | openai | openai-compatible | vercel-ai-sdk
# AI_DEFAULT_PROVIDER=
# AI_DEFAULT_MODEL=
# AI_DEFAULT_API_KEY=
# AI_DEFAULT_BASE_URL=         # only for the openai-compatible provider

# Per-feature flags (JSON object). Overrides the master switch for individual features.
# e.g. {"translation":true,"expressionGenerate":true,"expressionExplain":true,"activityLogSummary":true,"dataDictionary":true}
# AI_FEATURE_FLAGS=

# Maximum number of characters allowed in a single prompt (default: 200000).
# AI_MAX_PROMPT_CHARS=200000

# Timeout in milliseconds for AI API requests (default: 60000).
# AI_REQUEST_TIMEOUT_MS=60000

# Encryption key for user-stored API keys (required if users save their own).
# Generate: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
# AI_USER_KEY_ENCRYPTION_SECRET=