.env.example

PORT=4000
HOST=127.0.0.1
DEVSYNC_VAULT_NAME=devsync-vault
DEVSYNC_VAULT_REPO_URL=
DEVSYNC_GIT_USERNAME=oauth2
DEVSYNC_GIT_TOKEN=
DEVSYNC_GIT_COMMIT_NAME=Devsync
DEVSYNC_GIT_COMMIT_EMAIL=devsync@example.invalid
DEVSYNC_MAX_UPLOAD_BYTES=52428800

# Optional static bearer token for API/MCP automation. Prefer personal MCP tokens when possible.
DEVSYNC_API_TOKEN=

# Assistant/automation model.
# OpenAI example: openai:gpt-4.1-mini
# Anthropic example: anthropic:claude-sonnet-4-5-20250929
# Gemini example: google-genai:gemini-2.5-flash
# Bedrock example: bedrock_converse:<foundation-model-id>
DEVSYNC_AGENT_MODEL=openai:gpt-4.1-mini
OPENAI_API_KEY=
OPENAI_BASE_URL=
ANTHROPIC_API_KEY=
GOOGLE_API_KEY=
MISTRAL_API_KEY=
GROQ_API_KEY=

# Optional Bedrock Converse support.
# For Bedrock API keys, set AWS_BEARER_TOKEN_BEDROCK.
# For IAM access keys, set BEDROCK_AWS_ACCESS_KEY_ID and BEDROCK_AWS_SECRET_ACCESS_KEY.
BEDROCK_AWS_REGION=
AWS_BEARER_TOKEN_BEDROCK=
BEDROCK_AWS_ACCESS_KEY_ID=
BEDROCK_AWS_SECRET_ACCESS_KEY=
BEDROCK_AWS_SESSION_TOKEN=
DEVSYNC_BEDROCK_APPLICATION_INFERENCE_PROFILE=

# Optional AWS SES tool for automations/agents using tools: [send_email_ses].
DEVSYNC_SES_REGION=
DEVSYNC_SES_ACCESS_KEY_ID=
DEVSYNC_SES_SECRET_ACCESS_KEY=
DEVSYNC_SES_SESSION_TOKEN=
DEVSYNC_SES_FROM_EMAIL=
DEVSYNC_SES_CONFIGURATION_SET=

# Private local development only. Use AUTH_MODE=password for public/self-hosted installs.
AUTH_MODE=none
# AUTH_MODE=password

# Required when AUTH_MODE=password.
# Generate hashes with: node scripts/hash-password.mjs
# Format: email|display name|password hash
# AUTH_USERS=claudio@example.com|Claudio|scrypt$16384$8$1$64$...
# AUTH_SESSION_SECRET=change-me-to-a-long-random-string-at-least-32-chars
AUTH_COOKIE_SECURE=false

# Login and MCP token auth rate limits.
DEVSYNC_RATE_LIMIT_WINDOW_MS=600000
DEVSYNC_LOGIN_USER_LIMIT=8
DEVSYNC_LOGIN_IP_LIMIT=30
DEVSYNC_MCP_AUTH_LIMIT=60
DEVSYNC_MCP_TOKEN_CREATE_LIMIT=10