strale/.env.example at main · strale-io/strale · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
# Database
DATABASE_URL=postgresql://user:password@localhost:5432/strale

# Stripe (payments)
STRIPE_SECRET_KEY=sk_test_...
STRIPE_WEBHOOK_SECRET=whsec_...
STRIPE_PRICE_ID=price_...

# App
PORT=3000
NODE_ENV=development
STRALE_BASE_URL=http://localhost:3000
STRALE_MAX_PRICE_CENTS=200
FRONTEND_URL=http://localhost:5173
ADMIN_SECRET=your-admin-secret-here

# Required. HMAC secret for signing audit URLs (EU AI Act compliance links).
# Must be at least 32 characters. Generate with: openssl rand -hex 32
AUDIT_HMAC_SECRET=

# Optional. Better Stack (Logtail) source token for structured log
# shipping. When unset, pino writes JSON to stdout (Railway captures it
# anyway). Set in Railway for EU log shipping.
BETTER_STACK_SOURCE_TOKEN=

# Optional. Pino log level: trace | debug | info | warn | error | fatal.
# Defaults to `info`. Lower in prod during an incident, raise locally.
LOG_LEVEL=info

# Anthropic (Claude API — for LLM-powered capabilities)
ANTHROPIC_API_KEY=sk-ant-...

# Voyage AI (semantic search embeddings)
VOYAGE_API_KEY=pa-...

# Browserless (headless browser — EU endpoint for production)
# 47+ capabilities depend on Browserless for web scraping
BROWSERLESS_API_KEY=...
BROWSERLESS_URL=https://production-sfo.browserless.io/chromium
# Railway Browserless service env vars (set in Railway dashboard, not here):
#   MAX_CONCURRENT_SESSIONS=2    — Railway 1GB limit, 2 concurrent max
#   CONNECTION_TIMEOUT=30000     — Kill sessions after 30s
#   MAX_QUEUE_LENGTH=5           — Reject excess requests instead of OOM
#   PREBOOT_CHROME=true          — Keep warm instance for faster first load
#   EXIT_ON_HEALTH_FAILURE=true  — Auto-restart on health check failure
#   DEFAULT_BLOCK_ADS=true       — Reduce memory per page

# External API keys (optional — capabilities degrade gracefully without these)
COMPANIES_HOUSE_API_KEY=...
SERPER_API_KEY=...
DILISENSE_API_KEY=...          # Dilisense AML API — sanctions-check + pep-check + adverse-media-check
PAGESPEED_API_KEY=...
AVIATIONSTACK_API_KEY=...
ADZUNA_APP_ID=...
ADZUNA_APP_KEY=...
ABN_LOOKUP_GUID=...            # Australian Business Register — register at https://abr.business.gov.au/Tools/WebServices
ZEFIX_USERNAME=...             # Zefix PublicREST API — register at https://www.zefix.admin.ch/ZefixPublicREST/
ZEFIX_PASSWORD=...             # Zefix PublicREST API password