.env.template

# Stage templates (local harness / cloud dev): see backend/.env.{local-dev,offline,dev,prod}.template
# Copy one to backend/.env.<stage>, symlink backend/.env, set OMI_ENV_STAGE. See .envrc.example.

# Universal-memory deployment controls. They are global incident/readiness
# switches and never select a user, task system, or Chat-first shell.
#
# MEMORY_ENABLED is the one user-facing product switch; code fail-closes to off
# when unset. MEMORY_MODE and MEMORY_V3_GET_ENABLED are legacy one-deploy aliases
# kept so old revisions do not explode, and are written in neither overlays nor
# charts. MEMORY_CANONICAL_MAINTENANCE_ENABLED is per-deployable routing, not a
# rollout flag: false is correct here and everywhere except memory-maintenance-job,
# which is the only host of the ST->LT cron. These are local-harness defaults --
# for deployed values read backend/deploy/runtime_env/*.overlay.yaml.
MEMORY_ENABLED=off
MEMORY_MODE=off
MEMORY_CANONICAL_MAINTENANCE_ENABLED=false
MEMORY_V3_GET_ENABLED=false

# Whole-account cutover product-traffic fence. Default off until operators
# enable after the bridge release; registered in backend/deploy/runtime_env.
ACCOUNT_CUTOVER_ENFORCEMENT=off

BUCKET_SPEECH_PROFILES=
BUCKET_BACKUPS=
BUCKET_PLUGINS_LOGOS=

GOOGLE_APPLICATION_CREDENTIALS=google-credentials.json

PINECONE_API_KEY=
PINECONE_INDEX_NAME=

REDIS_DB_HOST=
REDIS_DB_PORT=
REDIS_DB_PASSWORD=

DEEPGRAM_API_KEY=
MODULATE_API_KEY=

ADMIN_KEY=
# Set to 'false' to disable the ADMIN_KEY<uid> local-dev auth bypass entirely
# (it defaults to 'true' for backward compatibility with existing deployments).
ADMIN_KEY_AUTH_ENABLED=true
# Server-side HMAC pepper for stored BYOK key fingerprints. When unset,
# fingerprints are stored as the plain client SHA-256 (legacy); when set,
# they are wrapped with this secret before storage/comparison so a leaked
# fingerprint store is not rainbow-table attackable. Leave unset for
# backward compatibility; set a stable random value to opt in.
BYOK_FINGERPRINT_PEPPER=
# Comma-separated exact origins allowed by CORS (e.g. https://app.omi.com).
# Defaults to empty (no origins) — the API is Bearer-token authenticated and
# browser default-deny already applies. Never use "*" and never combine with
# credential forwarding.
CORS_ALLOWED_ORIGINS=
OPENAI_API_KEY=

# Optional backend PostHog sink for provider sync/auth telemetry.
POSTHOG_PROJECT_API_KEY=
POSTHOG_HOST=https://app.posthog.com
MEMORY_DAILY_MEMORY_SWEEP_COHORT_FLAG=

# Dedicated bucket for just-in-time frame pixels. This must not reuse an audio
# or ambient-sync bucket because attached conversation evidence is permanent.
BUCKET_FRAME_REQUESTS=
BUCKET_FRAME_REQUESTS_TEMPORARY=

# ElevenLabs TTS (used by /v2/tts/synthesize to speak Omi responses on mobile)
ELEVENLABS_API_KEY=

GITHUB_TOKEN=

HUME_API_KEY=
HUME_CALLBACK_URL=

# Required for conversation processing. Without this, conversations stay in_progress permanently.
HOSTED_PUSHER_API_URL=

TYPESENSE_HOST=
TYPESENSE_HOST_PORT=
TYPESENSE_API_KEY=
# Optional kill switch for first-party conversation index writes (utils/conversations/typesense_index.py).
# Unset = on whenever TYPESENSE_HOST/TYPESENSE_API_KEY are configured; set to 0/false/off/no to disable.
# TYPESENSE_CONVERSATION_INDEX_WRITES=

STRIPE_API_KEY=
STRIPE_WEBHOOK_SECRET=
STRIPE_CONNECT_WEBHOOK_SECRET=

BASE_API_URL=

RAPID_API_HOST=
RAPID_API_KEY=

# Firebase OAuth
FIREBASE_API_KEY=
FIREBASE_AUTH_DOMAIN=
# Project whose Firebase ID tokens this backend accepts. This is intentionally
# separate from FIREBASE_PROJECT_ID so a self-hosted data project can verify
# tokens minted for the Firebase project used by the client app. Stock Omi
# mobile builds use based-hardware-dev; custom builds use their own project ID.
FIREBASE_AUTH_PROJECT_ID=
# Google Cloud/Firebase data project used by this backend's own services.
FIREBASE_PROJECT_ID=

# Encrypts conversations, memories, and chat messages. Required; set a unique
# securely generated secret of at least 32 bytes in every real environment.
ENCRYPTION_SECRET=

# Apple and Google OAuth (also used for Google Calendar and other Google integrations)
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
APPLE_CLIENT_ID=
APPLE_TEAM_ID=
APPLE_KEY_ID=
APPLE_PRIVATE_KEY=
API_BASE_URL=

PERPLEXITY_API_KEY=

# Twilio (Phone Calls)
TWILIO_ACCOUNT_SID=
TWILIO_AUTH_TOKEN=
TWILIO_API_KEY_SID=
TWILIO_API_KEY_SECRET=
TWILIO_TWIML_APP_SID=

# Integration OAuth Credentials

# Whoop OAuth Credentials
WHOOP_CLIENT_ID=
WHOOP_CLIENT_SECRET=

# Notion OAuth Credentials
NOTION_CLIENT_ID=
NOTION_CLIENT_SECRET=

# Twitter OAuth Credentials
TWITTER_CLIENT_ID=
TWITTER_CLIENT_SECRET=

# LangSmith Tracing (for LLM observability and evals)
# Get your API key from https://smith.langchain.com
LANGSMITH_TRACING=false
LANGSMITH_API_KEY=
LANGSMITH_PROJECT=omi-backend-chat
LANGSMITH_ENDPOINT=https://api.smith.langchain.com

# LangSmith Prompt Management
# The name of the prompt in LangSmith Hub to use for the agentic chat system
# If not set, defaults to "omi-agentic-system"
# The prompt will be fetched from LangSmith and cached for CACHE_TTL_SECONDS
OMI_LANGSMITH_AGENTIC_PROMPT_NAME=omi-agentic-system
# Cache TTL in seconds for the prompt template (default: 300 = 5 minutes)
# Lower values = faster prompt updates, higher values = fewer API calls
OMI_LANGSMITH_PROMPT_CACHE_TTL_SECONDS=300