b513b3b04f
Avoid Coolify OOM crashes by documenting and scripting sequential service builds, and make Docker builds resilient to local-only .env symlinks and missing .cursor agent paths. Co-authored-by: Cursor <cursoragent@cursor.com>
135 lines
5.7 KiB
Text
135 lines
5.7 KiB
Text
# =====================================================================
|
|
# ECHODO — Environment Variables
|
|
# =====================================================================
|
|
# Local dev: copy this file to .env and adjust values.
|
|
# Coolify (CT 107): paste these into the resource's "Environment Variables"
|
|
# tab. Coolify also accepts a .env file uploaded via the UI.
|
|
#
|
|
# See AGENT-DEPLOY.md for shared CT 102 service credentials and the
|
|
# CT 100 Traefik routing pattern.
|
|
# =====================================================================
|
|
|
|
# ----- Database (CT 102 shared Postgres) -----
|
|
# The database name is `echodo` everywhere — local dev, Coolify, and the
|
|
# drizzle migration ledger all assume it. Do NOT use `tasks` (an early
|
|
# pre-rename name); see commit 93565cd and the 2026-06 drift incident for
|
|
# why a parallel `tasks` DB caused production OAuth to look broken when
|
|
# it was really just connected to an empty schema.
|
|
#
|
|
# Local dev (Docker compose): postgresql://postgres:postgres@localhost:5432/echodo
|
|
# Production (Coolify, CT 102): dedicated `echodo` user/db on shared Postgres
|
|
DATABASE_URL="postgresql://echodo:CHANGE_ME@192.168.68.102:5432/echodo"
|
|
|
|
# UUID of the workspace that owns imported `plans/` rows (slug or UUID from Settings).
|
|
# For dogfooding this repo, use the `convoys-tasks` workspace id.
|
|
# Required by `pnpm --filter @tasks/database import:markdown-backlog` and
|
|
# `watch:markdown-backlog` (not loaded automatically — set in `.env`).
|
|
MARKDOWN_BACKLOG_WORKSPACE_ID="00000000-0000-0000-0000-000000000000"
|
|
|
|
# ----- Redis (CT 102 shared Redis) -----
|
|
# Use a dedicated DB index per AGENT-DEPLOY.md (ECHODO uses /11)
|
|
# Local dev: redis://localhost:6379
|
|
REDIS_URL="redis://:CHANGE_ME@192.168.68.102:6379/11"
|
|
|
|
# ----- Orchestrator (apps/orchestrator) -----
|
|
# ORCHESTRATOR_DRY_RUN=1 logs dispatch/transition without Redis enqueue
|
|
# ORCHESTRATOR_POLL_MS=5000
|
|
# ORCHESTRATOR_STALL_MINUTES=120
|
|
# ORCHESTRATOR_MAX_IMPLEMENTERS=2
|
|
|
|
# ----- Worker (apps/worker) -----
|
|
# WORKER_DRY_RUN=1 skips Redis dequeue loop
|
|
# WORKER_BLPOP_TIMEOUT_S=5
|
|
# WORKER_MAX_TOOL_STEPS=12
|
|
# WORKER_REPO_ROOT= # defaults to monorepo root (pnpm-workspace.yaml walk-up)
|
|
# WORKER_WORKTREE_BASE=/tmp/echodo-worker-worktrees
|
|
|
|
# ----- Auth (NextAuth v5) -----
|
|
# Local: http://localhost:3000 • Prod: https://echodo.stillwell.cloud
|
|
NEXTAUTH_URL="http://localhost:3000"
|
|
# Generate with: openssl rand -base64 32
|
|
NEXTAUTH_SECRET="CHANGE_ME_RUN_openssl_rand_base64_32"
|
|
AUTH_SECRET="CHANGE_ME_RUN_openssl_rand_base64_32"
|
|
|
|
# Optional dev-only credentials provider (looks up users by email,
|
|
# accepts this single password for everyone). Leave blank in prod.
|
|
AUTH_DEV_PASSWORD=""
|
|
|
|
# ----- OAuth Providers (all optional) -----
|
|
AUTH_GITHUB_ID=""
|
|
AUTH_GITHUB_SECRET=""
|
|
AUTH_GOOGLE_ID=""
|
|
AUTH_GOOGLE_SECRET=""
|
|
|
|
# Authentik SSO (CT 100 — auth.stillwell.cloud)
|
|
# In Authentik admin → Applications → Create OAuth2/OpenID Provider.
|
|
# Slug "echodo", redirect URI: <NEXTAUTH_URL>/api/auth/callback/authentik
|
|
AUTH_AUTHENTIK_ID=""
|
|
AUTH_AUTHENTIK_SECRET=""
|
|
AUTH_AUTHENTIK_ISSUER="https://auth.stillwell.cloud/application/o/echodo/"
|
|
|
|
# ----- Realtime collab server (Hocuspocus / Yjs) -----
|
|
# Server-side reference (used by Next.js server actions, if any)
|
|
COLLAB_SERVER_URL="ws://localhost:1234"
|
|
# Browser-facing — must be wss:// in production because the page is https
|
|
NEXT_PUBLIC_COLLAB_SERVER_URL="ws://localhost:1234"
|
|
|
|
# ----- Umami Analytics (CT 107 — analytics.stillwell.cloud) -----
|
|
# In Umami: Settings → Websites → Add website. Copy the website UUID.
|
|
NEXT_PUBLIC_UMAMI_SCRIPT="https://analytics.stillwell.cloud/script.js"
|
|
NEXT_PUBLIC_UMAMI_WEBSITE_ID=""
|
|
|
|
# ----- Libredesk Support Widget (CT 105 — support.stillwell.cloud) -----
|
|
NEXT_PUBLIC_LIBREDESK_URL="https://support.stillwell.cloud"
|
|
NEXT_PUBLIC_LIBREDESK_WIDGET_ID=""
|
|
|
|
# ----- Directus Feedback (CT 107 — directus.stillwell.cloud) -----
|
|
# Static token scoped write-only on the `feedback` collection
|
|
NEXT_PUBLIC_DIRECTUS_URL="https://directus.stillwell.cloud"
|
|
DIRECTUS_FEEDBACK_TOKEN=""
|
|
|
|
# ----- AI Providers -----
|
|
# Registry aliases (Epic 1) read these env var NAMES from the DB — values
|
|
# live here on the server/worker host, never in Postgres.
|
|
#
|
|
# Local Ollama on Mac:
|
|
# OPENAI_BASE_URL=http://<mac-lan-ip>:11434/v1
|
|
# OPENAI_API_KEY=ollama
|
|
# OPENAI_MODEL=qwen2.5-coder:32b
|
|
#
|
|
# Local MLX (mlx-openai-server on Mac — preferred for parallel implementers):
|
|
# MLX_SERVER_URL=http://<mac-lan-ip>:8000/v1
|
|
# MLX_API_KEY=local
|
|
# (Register as openai_compatible alias qwen-coder-mlx in Settings when Epic 1 ships)
|
|
#
|
|
# Cloud / free-tier (see docs/adr-model-routing.md):
|
|
OPENAI_API_KEY=""
|
|
OPENAI_BASE_URL=""
|
|
ANTHROPIC_API_KEY=""
|
|
GOOGLE_GENERATIVE_AI_API_KEY=""
|
|
NVIDIA_API_KEY=""
|
|
|
|
# ----- MCP Server -----
|
|
MCP_SERVER_PORT=3001
|
|
|
|
# =====================================================================
|
|
# Coolify Docker Compose build (8 GB hosts)
|
|
# =====================================================================
|
|
# Serialize image builds to avoid kernel OOM (exit 255) during export.
|
|
# Coolify (8 GB host): set Custom Build Command to `bash scripts/build-coolify.sh`
|
|
# so compose builds collab → mcp → orchestrator → worker → web sequentially.
|
|
# COMPOSE_PARALLEL_LIMIT is documented for reference but the script is required.
|
|
|
|
# =====================================================================
|
|
# Local Docker Compose only (docker/docker-compose.yml)
|
|
# Not needed for Coolify (Coolify uses CT 102's shared Postgres/Redis).
|
|
# =====================================================================
|
|
POSTGRES_USER=postgres
|
|
POSTGRES_PASSWORD=postgres
|
|
# Keep this aligned with the database name in DATABASE_URL above. The
|
|
# docker-compose files default to `tasks` (the old name) — override here.
|
|
POSTGRES_DB=echodo
|
|
POSTGRES_PORT=5432
|
|
REDIS_PORT=6379
|
|
WEB_PORT=3000
|
|
COLLAB_PORT=1234
|