Spaces:
Runtime error
Runtime error
| # ---- App | |
| ENV=development | |
| APP_NAME=Notestack | |
| FRONTEND_URL=http://localhost:5173 | |
| API_URL=http://localhost:8000 | |
| CORS_ORIGINS=http://localhost:5173 | |
| INTERNAL_TOKEN=replace-with-random-token | |
| BILLING_ENABLED=false | |
| # Stripe. Checkout, the customer portal and webhooks. Prices are found or created by lookup key | |
| # (notestack_<plan>_<cycle>) from backend/app/services/plans.py; set STRIPE_PRICE_* to pin existing ones. | |
| # Webhook endpoint: {API_URL}/api/billing/webhook with events checkout.session.completed, | |
| # checkout.session.async_payment_succeeded, checkout.session.async_payment_failed, | |
| # customer.subscription.created, customer.subscription.updated, customer.subscription.deleted, | |
| # customer.subscription.paused, customer.subscription.resumed, invoice.paid, invoice.payment_failed, | |
| # invoice.payment_action_required, charge.dispute.created. | |
| STRIPE_SECRET_KEY= | |
| STRIPE_WEBHOOK_SECRET= | |
| STRIPE_PRICE_WRITER_MONTHLY= | |
| STRIPE_PRICE_WRITER_ANNUAL= | |
| STRIPE_PRICE_STUDIO_MONTHLY= | |
| STRIPE_PRICE_STUDIO_ANNUAL= | |
| # ---- Auth (JWT). Revocation bumps users.token_version, so tokens can be long lived. | |
| JWT_SECRET=replace-with-64-random-chars | |
| JWT_ALGORITHM=HS256 | |
| JWT_EXPIRATION_HOURS=72 | |
| JWT_REFRESH_EXPIRATION_DAYS=30 | |
| # ---- Database (also backs the job queue) | |
| # Local: a SQLite file, created by `alembic upgrade head` run from backend/. | |
| # Prod (Neon, Supabase, RDS...): Postgres with the psycopg driver, e.g. | |
| # DATABASE_URL=postgresql+psycopg://user:pass@host:5432/dbname?sslmode=require | |
| # docker-compose ignores this and points at its own Postgres container. | |
| DATABASE_URL=sqlite:///./notestack.db | |
| # ---- Google sign in (OAuth client, type Web; add http://localhost:5173 to authorized JS origins) | |
| # Client ID only: popup sign in (Google Identity Services), no redirect URIs needed. | |
| # Client ID + secret: redirect flow with server side code exchange. Add the redirect URI | |
| # (default {API_URL}/api/auth/google/callback, e.g. http://localhost:8000/api/auth/google/callback) | |
| # to "Authorized redirect URIs" on the OAuth client. Never prefix the secret with VITE_. | |
| GOOGLE_CLIENT_ID= | |
| GOOGLE_CLIENT_SECRET= | |
| GOOGLE_REDIRECT_URI= | |
| # ---- Email (Resend). EMAIL_PROVIDER=console prints emails to the API log instead. | |
| EMAIL_PROVIDER=console | |
| RESEND_API_KEY= | |
| FROM_EMAIL=Notestack <hello@notestack.ai> | |
| ALERTS_EMAIL=arslan@firebird-technologies.com | |
| UNSUBSCRIBE_SECRET=replace-me | |
| # Hour (UTC, 0 to 23) at which scheduled update email campaigns send their daily batch. | |
| UPDATE_EMAIL_SEND_HOUR=9 | |
| # ---- Local dev conveniences | |
| # The API runs the job worker in process when ENV=development (set false to use python -m app.worker). | |
| RUN_WORKER_IN_API= | |
| # auto = local disk (LOCAL_STORAGE_DIR) when no R2 account or endpoint is set, else R2 | |
| STORAGE_BACKEND=auto | |
| LOCAL_STORAGE_DIR=.storage | |
| # ---- Storage: Cloudflare R2 | |
| # Prod: set account id + keys, leave R2_ENDPOINT_URL empty. | |
| # Local: docker-compose points R2_ENDPOINT_URL at MinIO (keys minioadmin/minioadmin). | |
| R2_ACCOUNT_ID= | |
| R2_ACCESS_KEY_ID=minioadmin | |
| R2_SECRET_ACCESS_KEY=minioadmin | |
| R2_BUCKET=notestack-assets | |
| R2_ENDPOINT_URL= | |
| R2_PUBLIC_BASE_URL= | |
| # Folder inside the bucket when it is shared with other apps, e.g. notestack. Empty = bucket root. | |
| R2_PREFIX= | |
| # How long presigned download links stay valid, in seconds. | |
| R2_PRESIGN_TTL_SECONDS=3600 | |
| # Largest file a browser may upload (bytes). 209715200 = 200 MB. | |
| MAX_UPLOAD_BYTES=209715200 | |
| # ---- LLM (any LiteLLM model string). Defaults target Z.ai GLM-5.3 via its OpenAI compatible API. | |
| # GLM-5.x always reasons; LLM_REASONING_EFFORT (low | high | max) trades cost for depth. | |
| # Cheaper: LLM_MODEL=openai/glm-5.3-flash. Free for local dev: openai/glm-4.7-flash | |
| LLM_MODEL=openai/glm-5.3 | |
| LLM_FAST_MODEL=openai/glm-5.3-flash | |
| LLM_API_BASE=https://api.z.ai/api/paas/v4 | |
| LLM_API_KEY= | |
| LLM_TEMPERATURE=1.0 | |
| LLM_MAX_TOKENS=10000 | |
| LLM_REASONING_EFFORT=low | |
| # Fallback chat triage model when Jev is not configured. Empty = LLM_FAST_MODEL. | |
| LLM_TRIAGE_MODEL= | |
| # ---- Chat triage: TypeSafe Jev (https://typesafe.ai) | |
| # A fast classifier (typed choices, no text generation) that decides what each chat message needs | |
| # before any research runs. With a key set, greetings, off topic and app questions never reach the | |
| # LLM, and archive questions get a quick or deep research budget. Empty = LLM triage above. | |
| TYPESAFE_API_KEY= | |
| TYPESAFE_MODEL=jev-latest | |
| TYPESAFE_URL=https://api.typesafe.ai | |
| # Firecrawl (firecrawl.dev): lets Connect read sites with no RSS feed, including JavaScript sites | |
| # (Next.js, Framer, Webflow), and makes single URL imports reliable. Empty = plain HTTP fetching only. | |
| FIRECRAWL_API_KEY= | |
| # ---- Research corpus (posts as markdown files; the agent greps and reads them, no vector index) | |
| CORPUS_CACHE_DIR=.corpus-cache | |
| RESEARCH_MAX_STEPS=10 | |
| # ---- Worker (jobs queue lives in the database; no Redis) | |
| WORKER_CONCURRENCY=4 | |
| WORKER_POLL_SECONDS=1 | |
| JOB_STALE_SECONDS=900 | |
| # ---- ElevenLabs (audio overviews, video narration, voice cloning) | |
| ELEVENLABS_API_KEY= | |
| ELEVENLABS_MODEL=eleven_multilingual_v2 | |
| ELEVENLABS_VOICE_A=EXAVITQu4vr4xnSDxMaL | |
| ELEVENLABS_VOICE_B=JBFqnCBsd6RMkjVDRZzb | |
| # ---- Renderer (Remotion service for videos, quote cards and carousels: cd renderer && npm start) | |
| RENDERER_URL=http://localhost:3100 | |
| # ---- Launchpad social publishing | |
| # Bluesky needs nothing here (users connect with an app password). | |
| # X: developer app with OAuth 2.0, type Web App, scopes tweet.read tweet.write users.read offline.access. | |
| # Callback URI: {API_URL}/api/social/x/callback e.g. http://localhost:8000/api/social/x/callback | |
| # LinkedIn: app with the "Sign In with LinkedIn using OpenID Connect" and "Share on LinkedIn" products. | |
| # Redirect URL: {API_URL}/api/social/linkedin/callback | |
| X_CLIENT_ID= | |
| X_CLIENT_SECRET= | |
| LINKEDIN_CLIENT_ID= | |
| LINKEDIN_CLIENT_SECRET= | |
| # Fernet key for stored social tokens; derived from JWT_SECRET when empty. | |
| SOCIAL_TOKEN_KEY= | |