47 lines
1.9 KiB
Plaintext
47 lines
1.9 KiB
Plaintext
# /etc/klanker-gate/env — loaded by systemd (EnvironmentFile=).
|
|
# Mirrors the upstream .env.example conventions: a blank value means "leave
|
|
# the feature off"; secrets ship blank on purpose. Edit, then:
|
|
# systemctl restart klanker-gate
|
|
#
|
|
# Full knob reference: /usr/share/klanker-gate/docs/reference/environment-variables.md
|
|
|
|
# ── core gateway ────────────────────────────────────────────────────────
|
|
PORT=8080
|
|
|
|
# REQUIRED — durable state store. Local Arch postgres created via the
|
|
# INSTALL-ARCH.md steps:
|
|
# postgres://klanker:CHANGE_ME@127.0.0.1:5432/klanker
|
|
# (remote PG, the docker-compose service, or PgBouncer in front all work.)
|
|
FROSTY_PG_URL=
|
|
|
|
# ── worker topology (an Arch bonus) ─────────────────────────────────────
|
|
# SO_REUSEPORT fan-out is Linux/darwin only — Windows had to serve
|
|
# single-process. On Arch this actually unlocks the feature:
|
|
# FROSTY_WORKERS=4
|
|
FROSTY_WORKERS=
|
|
|
|
# ── admin protection (REQUIRED by the SysDeck package) ─────
|
|
# REQUIRED — upstream serves the ENTIRE admin API unauthenticated when
|
|
# this is empty ("local-admin mode") while binding 0.0.0.0; the SysDeck
|
|
# systemd unit refuses to start without a token. Generate one:
|
|
# openssl rand -hex 24
|
|
# The SysDeck klanker module reads the operator API with this token.
|
|
FROSTY_ADMIN_TOKEN=
|
|
FROSTY_ALLOWED_HOSTS=
|
|
FROSTY_ENCRYPTION_KEY=
|
|
|
|
# ── provider credentials (any subset; blank = provider stays off) ───────
|
|
OPENAI_API_KEY=
|
|
ANTHROPIC_API_KEY=
|
|
GEMINI_API_KEY=
|
|
OPENROUTER_API_KEY=
|
|
GROQ_API_KEY=
|
|
MISTRAL_API_KEY=
|
|
XAI_API_KEY=
|
|
COHERE_API_KEY=
|
|
OLLAMA_BASE_URL=
|
|
OLLAMA_MODELS=
|
|
|
|
# ── optional subsystems (see the env reference for the full list) ───────
|
|
# Cache, semantic cache, MCP clients, OTel export, pricing sync, plugins.
|