spb/tools-spboucher-ai

1# Copy to .env (never commit .env). All values are placeholders.2APP_URL=http://localhost:85403PORT=85404# Full-privilege connection used by the admin API, worker, migrations and imports.5DATABASE_URL=postgres://tools_app:CHANGE_ME@127.0.0.1:5432/tools_spboucher6# Read-only role used by every PUBLIC page/API (SELECT on public views only). Falls back to DATABASE_URL if unset (dev only).7DATABASE_URL_PUBLIC=postgres://tools_reader:CHANGE_ME@127.0.0.1:5432/tools_spboucher8# 32+ random bytes, hex. Used for CSRF double-submit tokens and signed values.9SESSION_SECRET=CHANGE_ME_64_HEX_CHARS10# WebAuthn relying party (production: tools.spboucher.ai / https://tools.spboucher.ai)11WEBAUTHN_RP_ID=localhost12WEBAUTHN_ORIGIN=http://localhost:854013# Owner bootstrap (first run of `pnpm bootstrap`); the password must be changed after first login.14OWNER_EMAIL=owner@example.com15OWNER_INITIAL_PASSWORD=CHANGE_ME_LONG_RANDOM16# Optional AI provider for semantic search / suggestions. Leave empty to run with lexical search only.17AI_PROVIDER=none            # none | openai | anthropic18OPENAI_API_KEY=19ANTHROPIC_API_KEY=20AI_MONTHLY_BUDGET_USD=521# Backups22BACKUP_DIR=./backups23BACKUP_PASSPHRASE=CHANGE_ME24BACKUP_REMOTE=               # optional rsync target, e.g. user@host:~/backups/tools-spboucher-ai25# Worker26WORKER_POLL_MS=500027OUTBOUND_USER_AGENT=tools.spboucher.ai link-checker (+https://tools.spboucher.ai/about)28