FRIDAY/.env.example at main · LeeSinLiang/FRIDAY · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
DJANGO_DEBUG=true
# Set a unique secret before deployment. Blank uses a development-only fallback.
DJANGO_SECRET_KEY=
DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1,[::1]
# Required in production; leave blank for local SQLite. Use separate preview/production databases.
DATABASE_URL=
# Frontend Vercel project only: exact matching Preview/Production API origin.
# FRIDAY_API_ORIGIN=https://your-api-deployment.vercel.app
# Production Fernet key, supplied as a secret environment variable, never committed.
MFA_ENCRYPTION_KEY=
# Production inline Visa configuration. PEM contents replace the local file-path values.
VISA_CREDENTIALS_JSON=
# CSRF_TRUSTED_ORIGINS=https://your-frontend.example
BACKEND_PORT=8000
FRONTEND_PORT=5173

# Centimeters per render unit. Restart Vite after changing.
SCENE_UNIT_CM=5

# Catalogue & language (Saketh). Real values go in .env, the only file loaded — never commit them.
ELASTIC_URL=
ELASTIC_API_KEY=
# memory | elastic — memory is the default and the demo fallback
SEARCH_BACKEND=memory
# What search returns (counts always cover the whole catalogue). Empty or boost = everything, with listings
# that have a 3D model first (the default, and how the demo runs); 1 = only those; 0 = everything in plain order.
SEARCH_RESULTS_REQUIRE_MODEL=
# Used only by compile() via the OpenAI Agents SDK
OPENAI_API_KEY=
# Optional. Defaults to the cheapest model that passes the compile fixture.
OPENAI_MODEL=

# Optional local IDX tester. Never expose it on a public server.
VISA_SANDBOX_TESTER_ENABLED=false
# Absolute path to a mode-0600 JSON credential file outside the repository.
VISA_SANDBOX_CREDENTIALS_FILE=

# Account workflow: private local inbox in DEBUG, SMTP in deployment.
AUTH_LOCAL_INBOX_ENABLED=true
# Optional absolute frontend origin. Local ports are used when omitted.
# FRONTEND_ORIGIN=https://your-app.example
# setup.sh creates backend/.runtime/mfa.key locally. Back it up with the database;
# do not replace it or existing authenticator secrets become unreadable.
# MFA_ENCRYPTION_KEY_FILE=/private/path/friday-mfa.key
# For real mail, set EMAIL_BACKEND=django.core.mail.backends.smtp.EmailBackend
# and disable AUTH_LOCAL_INBOX_ENABLED. Keep credentials only in private .env.
# EMAIL_HOST=smtp.your-provider.example
# EMAIL_PORT=587
# EMAIL_USE_TLS=true
# EMAIL_HOST_USER=
# EMAIL_HOST_PASSWORD=
# DEFAULT_FROM_EMAIL=FRIDAY <noreply@your-domain.example>

# Voice. openai | deepgram | browser. browser uses the Web Speech API and needs no server key.
# STT_PROVIDER takes precedence; TRANSCRIBE_BACKEND remains for older deployments.
STT_PROVIDER=
TRANSCRIBE_BACKEND=browser
DEEPGRAM_API_KEY=