# Copy to .env next to docker-compose.images.yml.
# install-images.sh creates that file and fills the required secrets automatically.

POSTGRES_USER=rakazo
POSTGRES_PASSWORD=
POSTGRES_DB=rakazo

BETTER_AUTH_SECRET=
ENCRYPTION_KEY=
SCREEN_PROXY_SECRET=
# Distinct from BETTER_AUTH_SECRET. Required for local Docker computers.
SANDBOX_SUPERVISOR_TOKEN=

# Public origin the browser uses. For a VPS, put TLS in front of :5173 and use https://…
BETTER_AUTH_URL=http://127.0.0.1:5173
WEB_ORIGIN=http://127.0.0.1:5173
API_URL=http://127.0.0.1:5173
RAKAZO_HOST=localhost

SIGNUPS_ENABLED=true
SIGNUP_ALLOWLIST=

# Optional password-recovery email. Both Resend and Amazon SES provide SMTP credentials.
SMTP_URL=
EMAIL_FROM=

# edge tracks main (amd64 only). Pin a published release tag when you need arm64 or a fixed version.
RAKAZO_IMAGE=ghcr.io/elie222/rakazo/app
RAKAZO_IMAGE_TAG=edge
RAKAZO_COMPUTER_IMAGE=ghcr.io/elie222/rakazo/computer
RAKAZO_COMPUTER_IMAGE_TAG=edge

# docker = local computers via the in-stack supervisor (default). Optional remote: e2b, daytona, box.
# none boots the UI without computers when Docker/supervisor is not configured.
SANDBOX_PROVIDER=docker
# E2B_API_KEY=
# DAYTONA_API_KEY=
# BOX_API_KEY=

# Optional model / integration keys
OPENROUTER_API_KEY=
COMPOSIO_API_KEY=