.env.example

# bigRAG environment variables
# Export only the values you need; the API does not auto-load a root .env file.
# Defaults live in api/bigrag/config.py; avoid setting default-only values in deploy platforms.

# Required for provider-backed embedding.
BIGRAG_EMBEDDING_API_KEY=

# Required in production. Generate with:
#   python -c 'from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())'
BIGRAG_MASTER_KEY=

# Production mode enables startup safety checks.
# BIGRAG_ENV=prod
# BIGRAG_ALLOW_PUBLIC_BIND_IN_PROD=true

# Production logs should be machine-readable.
# BIGRAG_LOG_LEVEL=info
# BIGRAG_LOG_FORMAT=json

# Set for browser clients such as the admin UI.
# BIGRAG_CORS_ORIGINS=["https://admin.example.com"]
# BIGRAG_SESSION_COOKIE_SECURE=true
# BIGRAG_SESSION_COOKIE_SAMESITE=lax

# Override only when the backing services are not running on local defaults.
# BIGRAG_DATABASE_URL=postgres://bigrag:bigrag@localhost:5432/bigrag?sslmode=disable
# BIGRAG_REDIS_URL=redis://localhost:6379/0

# Separate Redis for the response/embedding cache (defaults to BIGRAG_REDIS_URL).
# Keep the cache off the broker Redis at scale so cache eviction can't drop queued jobs.
# BIGRAG_CACHE_REDIS_URL=redis://localhost:6379/1

# Optional Redis password for docker-compose production runs.
# If the password contains URL-reserved characters, URL-encode it in BIGRAG_REDIS_URL.
# REDIS_PASSWORD=
# BIGRAG_REDIS_URL=redis://:<url-encoded-password>@redis:6379/0

# Set only when local uploads should live outside ./data/uploads.
# BIGRAG_UPLOAD_DIR=/data/uploads

# Optional proxy trust list for audit logs.
# BIGRAG_TRUSTED_PROXIES=["10.0.0.0/8"]