admin/.env.example at main · nself-org/admin · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
# nself-admin development configuration
# Copy this file to .env and update values for your environment
NSELF_PROJECT_PATH=/path/to/your/nself/backend
PORT=3025
NODE_ENV=development
DEBUG=true

# ─────────────────────────────────────────────────────────────────────────────
# Error Reporting — Sentry (optional)
# ─────────────────────────────────────────────────────────────────────────────

# Leave blank to disable error reporting. When set, uncaught errors are forwarded
# to your Sentry project. The SDK is loaded lazily — no overhead when this is unset.
# Obtain your DSN from: https://sentry.io → Project Settings → Client Keys (DSN).
# ADMIN_SECRET must NOT be set to any dummy/placeholder value in production (see below).
SENTRY_DSN=

# ─────────────────────────────────────────────────────────────────────────────
# Hasura Admin Secret (REQUIRED in production)
# ─────────────────────────────────────────────────────────────────────────────

# Must be set to a secure random value (minimum 32 characters) in production.
# Dev-stub values (hasura-admin-secret-dev, dummy*, changeme) are blocked at
# runtime in production — the process will throw immediately if detected.
HASURA_GRAPHQL_ADMIN_SECRET=

# ─────────────────────────────────────────────────────────────────────────────
# Multi-User Admin UI (v1.2 preview — NOT wired in v1.0.9)
# ─────────────────────────────────────────────────────────────────────────────

# When false (default), hides /users, /tenant/*, /auth/roles pages and returns
# HTTP 404 from the corresponding API endpoints. Admin is single-operator in
# v1.0.9 and v1.1.0: the password authenticates one operator with full access.
#
# Setting this to true reveals the UI (sidebar items + pages) but the backend
# CLI commands do not exist yet -- pages show a "v1.2 preview" banner.
# Multi-user Admin GA: v1.2.0 (Q3 2026 target).
# See: https://docs.nself.org/admin/single-user-posture
NSELF_ADMIN_MULTIUSER=false

# ─────────────────────────────────────────────────────────────────────────────
# O04 Auth Service (optional — enables /account, /licenses, /team, /audit-log)
# ─────────────────────────────────────────────────────────────────────────────

# Base URL of the nself auth service (ping_api / O04). When not set, all
# account API routes return stub/empty data with offline:true. In production
# this should point to https://ping.nself.org or your local auth service.
NSELF_AUTH_URL=

# ─────────────────────────────────────────────────────────────────────────────
# SSO Header Fallback (Cloudflare Access / nginx auth_request style)
# ─────────────────────────────────────────────────────────────────────────────

# Set to "true" to enable SSO header auto-login. When enabled, the middleware
# checks for an email address in the configured header on every unauthenticated
# request. If found, the user is redirected through /api/auth/sso to create a
# local session without entering a password.
#
# Example setups:
#   Cloudflare Access → CF-Access-Authenticated-User-Email header (default)
#   nginx auth_request → X-Auth-Request-Email header
#   Tailscale funnel → Tailscale-User-Login header
NSELF_ADMIN_SSO_HEADER_ENABLED=false

# Name of the header that carries the authenticated user's email address.
# Defaults to CF-Access-Authenticated-User-Email (Cloudflare Access standard).
NSELF_ADMIN_SSO_HEADER_NAME=CF-Access-Authenticated-User-Email

# When true, SSO logins for previously-unseen email addresses automatically
# create a local session (no password prompt). When false, only the admin
# operator email is allowed through SSO; others get a 403.
NSELF_ADMIN_SSO_AUTO_PROVISION=false

# ── Vibe-Code Web IDE (B41) ────────────────────────────────────────────────────
# Set to true to enable the Vibe-Code IDE at /vibe.
# Disabled by default in v1.0.x; enabled by default in local mode patch train.
NSELF_VIBE_ENABLED=true

# Port for the vibe_api custom service.
# NOTE: Port 8002 is assigned to ping_api_canary CS_2 per SPORT F10.
# A free CS_N slot and port must be assigned before deploying vibe_api.
# Use 8003 or the next available CS_N port (pending SPORT F10 update).
NSELF_VIBE_PORT=8003

# Maximum tokens per generation prompt.
NSELF_VIBE_MAX_PROMPT_TOKENS=16000

# Maximum concurrent vibe sessions per user.
NSELF_VIBE_MAX_SESSIONS_PER_USER=3

# AI provider for generation: claw-ai (default) or ollama (local, no cloud dep).
NSELF_VIBE_AI_PROVIDER=claw-ai

# Target environment. Only set to prod explicitly if you intend prod deploys.
# local | staging | prod (prod requires NSELF_VIBE_APPLY_REQUIRES_CONFIRM=true)
NSELF_VIBE_TARGET_ENV=local

# Always gate applies behind a confirm dialog. Never set to false in production.
NSELF_VIBE_APPLY_REQUIRES_CONFIRM=true

# UI framework for generated frontend code: react | flutter-web
NSELF_VIBE_UI_FRAMEWORK=react

# Client-side feature flag (must match NSELF_VIBE_ENABLED above)
NEXT_PUBLIC_NSELF_VIBE_ENABLED=true