omi/desktop/macos/Backend-Rust/.env.example at websearch-dev-test · ghzhost/omi · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
# Desktop Rust Backend — Environment Variables
# Copy to .env and fill in values from GCP Secret Manager:
#   gcloud secrets versions access latest --secret=<NAME> --project=based-hardware-dev
#
# IMPORTANT: Single-quote passwords that contain $ characters to prevent
# dotenvy variable expansion (e.g. PASSWORD='my$ecret')

# ─── Server ──────────────────────────────────────────────────────────
# Pick any free port (avoid 8080 to prevent port conflicts)
PORT=10201

# ─── Firebase / Firestore ────────────────────────────────────────────
# Project ID determines which Firestore database to use
FIREBASE_PROJECT_ID=based-hardware-dev
# Path to GCP service account JSON (must have Firestore + Compute access)
GOOGLE_APPLICATION_CREDENTIALS=/path/to/google-credentials.json
# Firebase Web API key (for identity toolkit / auth token exchange)
FIREBASE_API_KEY=
# Auth token validation project ID (defaults to FIREBASE_PROJECT_ID)
# Set to "based-hardware" for local dev — Cloud Run OAuth issues prod tokens
# FIREBASE_AUTH_PROJECT_ID=based-hardware

# ─── AI ──────────────────────────────────────────────────────────────
GEMINI_API_KEY=
OPENAI_API_KEY=

# ─── Encryption ──────────────────────────────────────────────────────
# Used to decrypt user data with enhanced protection level
ENCRYPTION_SECRET=

# ─── Redis ───────────────────────────────────────────────────────────
# Required for server-key Gemini/chat/TTS metering and shared metadata.
# The service stays live but reports /ready=503 when Redis is unavailable.
REDIS_DB_HOST=
REDIS_DB_PORT=6379
REDIS_DB_PASSWORD=

# ─── Pinecone (vector embeddings) ────────────────────────────────────
PINECONE_API_KEY=
PINECONE_HOST=

# ─── AgentVM (GCE provisioning) ─────────────────────────────────────
# All optional — defaults derived from FIREBASE_PROJECT_ID
# GCE_PROJECT_ID=                 # defaults to FIREBASE_PROJECT_ID
# GCE_SOURCE_IMAGE=               # defaults to projects/{project}/global/images/family/omi-agent
# AGENT_GCS_BUCKET=               # defaults to based-hardware-agent

# ─── Desktop API keys ────────────────────────────────────────────────
DEEPGRAM_API_KEY=
# Anthropic key — server-side only, used by /v2/chat/completions proxy.
# NOT served to clients (issue #6594). Clients auth via Firebase token.
ANTHROPIC_API_KEY=
# Legacy: served as anthropic_api_key in /api-keys for old clients. Deprecated.
DESKTOP_LEGACY_ANTHROPIC_KEY=
GOOGLE_CALENDAR_API_KEY=

# ─── OAuth (required for desktop sign-in) ────────────────────────────
# BASE_API_URL is required — no fallback. Set to your auth service URL.
BASE_API_URL=http://localhost:10200
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
# Apple Sign-In (optional)
# APPLE_CLIENT_ID=
# APPLE_TEAM_ID=
# APPLE_KEY_ID=
# APPLE_PRIVATE_KEY=

# ─── Observability (optional) ───────────────────────────────────────
# RUST_LOG=debug
# POSTHOG_PERSONAL_API_KEY=
# POSTHOG_PROJECT_ID=302298
# SENTRY_WEBHOOK_SECRET=
# SENTRY_AUTH_TOKEN=
# SENTRY_ADMIN_UID=

# ─── Crisp (optional, customer support) ─────────────────────────────
# CRISP_PLUGIN_IDENTIFIER=
# CRISP_PLUGIN_KEY=
# CRISP_WEBSITE_ID=