Setpoint/.env.example at master · ansidian/Setpoint · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
# The owner’s live Debian instance uses EA_DB_ADAPTER=sqlite and an absolute EA_SQLITE_PATH.
# Without an explicit adapter, development uses local SQLite and production selects Turso.
# EA_DB_ADAPTER=sqlite
# EA_SQLITE_PATH=/srv/setpoint/data/db/setpoint.db
# EA_WEBHOOK_ORIGIN=https://server.example-tailnet.ts.net:8443
# EA_BACKGROUND_WORKERS_ENABLED=0 disables all scheduled/startup workers for rehearsal.
# EA_BIND_HOST=127.0.0.1

# Alternative Turso adapter only; not required for Debian SQLite or normal development.
# Use a fresh database for an alternative installation, not the retired production copy.
TURSO_DATABASE_URL=libsql://your-ea-db.turso.io
TURSO_AUTH_TOKEN=

# Required bootstrap for every host: a 256-bit value encoded as 64 hex characters
# or standard base64. The optional Render blueprint generates this key.
EA_ENCRYPTION_KEY=
# Required only while claiming a fresh instance. Generate at least 32 random
# characters and enter the same value on the first-run setup screen.
EA_SETUP_TOKEN=

# Local default for private tldraw images and videos. Debian production sets a
# persistent mounted path; the alternative Render blueprint sets its disk path.
EA_TLDRAW_ASSET_DIR=server/db/tldraw-assets

# Optional advanced host-managed provider sources. Normal setup stores these
# write-only in Setpoint Settings; stored values take precedence over env values.
# AI providers
ANTHROPIC_API_KEY=
OPENAI_API_KEY=

# Google OAuth (Gmail + Calendar)
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=

# Calendar place enrichment and weather
GOOGLE_PLACES_API_KEY=
PIRATE_WEATHER_API_KEY=

# Optional advanced Gmail real-time delivery
GMAIL_PUBSUB_TOPIC=projects/your-project/topics/gmail-push
GMAIL_PUBSUB_PUSH_TOKEN=
# Optional outbound StreamingPull (takes precedence over webhook delivery).
# Use a pull subscription on the same topic and a narrowly scoped subscriber credential.
GMAIL_PUBSUB_SUBSCRIPTION=
GOOGLE_APPLICATION_CREDENTIALS=

# Optional advanced Todoist OAuth + webhooks
TODOIST_CLIENT_ID=
TODOIST_CLIENT_SECRET=

# Optional operational tuning. Production defaults delay workers 60-120s after
# listen, then add 2m before the passive indexer and 10m before backfill.
EA_STARTUP_WORKER_DELAY_MS=
EA_STARTUP_WORKER_JITTER_MS=
EA_STARTUP_INDEXER_OFFSET_MS=
EA_STARTUP_BACKFILL_OFFSET_MS=
EA_STARTUP_TODOIST_SYNC_OFFSET_MS=
EA_EMAIL_BACKFILL_QUEUE_ON_STARTUP=
# Semantic resolution is production-primary. Set to shadow only for a bounded
# rollback canary that returns legacy results while logging redacted comparisons.

# Optional local-development switches
# AI_SEARCH_VECTOR_ADAPTER=turso
# EA_DEV_DB_ADAPTER=turso
# EA_EMAIL_SEARCH_EMBEDDINGS_DISABLED=1
# DEV_MOCK_SEARCH=1
# PLAYWRIGHT_EA_PASSWORD=

# Optional legacy compatibility for existing installations only. Fresh instances
# create owner auth and confirm the canonical URL in the browser.
# EA_PASSWORD_HASH=$2b$12$...
# EA_USER_ID=your-user-id
# EA_WEBAUTHN_RP_NAME=Setpoint
# EA_WEBAUTHN_RP_ID=your-app-domain.com
# EA_WEBAUTHN_ORIGIN=https://your-app-domain.com
# GOOGLE_REDIRECT_URI=https://your-app.onrender.com/api/ea/accounts/gmail/callback

# Actual Budget CLI only (`npm run actual`); runtime values live encrypted in Settings.
ACTUAL_SERVER_URL=https://your-actual-server
ACTUAL_PASSWORD=
ACTUAL_SYNC_ID=

# Actual SDK worker: persistent by default. Heap ceiling is not a reservation.
# EA_ACTUAL_WORKER_MAX_OLD_SPACE_MB=1024
# EA_ACTUAL_WORKER_IDLE_SHUTDOWN_MS=0
# Optional positive idle timeout retires unused workers; normal operation keeps them warm.