# Auto-generated credentials template

# Copy this file to .env and populate with your values, or run scripts/generate-env.sh to populate automatically

# ============================================

# PostgreSQL Configuration

# ============================================

POSTGRES_USER=postgres

POSTGRES_PASSWORD=

POSTGRES_DB=postgres

# ============================================

# ClickHouse Configuration

# ============================================

CLICKHOUSE_USER=clickhouse

CLICKHOUSE_PASSWORD=

# ============================================

# ClickHouse MCP Configuration

# ============================================

CLICKHOUSE_MCP_AUTH_TOKEN=

# ============================================

# Redis Configuration

# ============================================

REDIS_AUTH=

# ============================================

# MinIO Configuration

# ============================================

MINIO_ROOT_USER=minio

MINIO_ROOT_PASSWORD=

# ============================================

# Langfuse Configuration

# ============================================

ENCRYPTION_KEY=

NEXTAUTH_SECRET=

SALT=

# Langfuse Initialization (required for headless setup)

LANGFUSE_INIT_ORG_ID=

LANGFUSE_INIT_ORG_NAME=Default Organization

LANGFUSE_INIT_PROJECT_ID=

LANGFUSE_INIT_PROJECT_NAME=Default Project

# Langfuse Project Keys (used by the hook)

LANGFUSE_INIT_PROJECT_PUBLIC_KEY=

LANGFUSE_INIT_PROJECT_SECRET_KEY=

# Your login credentials

LANGFUSE_INIT_USER_PASSWORD=yourpass

LANGFUSE_INIT_USER_NAME=YourName

# ============================================

# Langfuse Environment Variables

# ============================================

NEXTAUTH_URL=http://localhost:3000

DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}

CLICKHOUSE_MIGRATION_URL=clickhouse://clickhouse:9000

CLICKHOUSE_URL=http://clickhouse:8123

CLICKHOUSE_CLUSTER_ENABLED=false

# S3/MinIO Configuration

LANGFUSE_S3_EVENT_UPLOAD_BUCKET=langfuse

LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID=minio

LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY=${MINIO_ROOT_PASSWORD}

LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT=http://minio:9000

LANGFUSE_S3_MEDIA_UPLOAD_BUCKET=langfuse

LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID=minio

LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY=${MINIO_ROOT_PASSWORD}

LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT=http://localhost:9090

REDIS_HOST=redis

REDIS_PORT=6379

# ============================================

# LibreChat Configuration

# ============================================

LIBRECHAT_PORT=3080

RAG_PORT=8001

MEILI_MASTER_KEY=

VECTORDB_DB=librechat_vectordb

VECTORDB_USER=vectordb_user

VECTORDB_PASSWORD=

# ============================================

# LibreChat Configuration

# ============================================

JWT_SECRET=

JWT_REFRESH_SECRET=

# LibreChat Initial User

# Note: These are the same as the Langfuse credentials by default

LIBRECHAT_USER_PASSWORD=yourpass

LIBRECHAT_USER_NAME=YourName

# LibreChat Encryption Keys (required for encrypting user API keys)

# CREDS_KEY: 64-character hex string (32 bytes) for AES-256 encryption

# CREDS_IV: 32-character hex string (16 bytes) for AES-CBC initialization vector

CREDS_KEY=

CREDS_IV=

# LibreChat API Keys - Set to "user_provided" to allow users to configure their own keys in the UI

ANTHROPIC_API_KEY=

GOOGLE_KEY=

OPENAI_API_KEY=

# ============================================

# Admin Panel Configuration

# ============================================

# Port the admin panel listens on (default 3081 to avoid clashing with Langfuse on 3000)

ADMIN_PANEL_PORT=3081

# Session encryption key for the admin panel. Must be at least 32 characters.

ADMIN_PANEL_SESSION_SECRET=

# Hide the email/password form and require SSO only (default: false)

# ADMIN_SSO_ONLY=false

# Session idle timeout in milliseconds (default: 30 minutes)

# ADMIN_SESSION_IDLE_TIMEOUT_MS=1800000

# ============================================

# RAG API Configuration (File Search)

# ============================================

# The RAG API calls the embeddings endpoint directly and cannot use "user_provided" keys.

# If OPENAI_API_KEY is set to "user_provided", set RAG_OPENAI_API_KEY to a real key instead.

# RAG_OPENAI_API_KEY overrides OPENAI_API_KEY for RAG only.

# To use a different embeddings provider, set EMBEDDINGS_PROVIDER to one of:

# openai (default), azure, huggingface, huggingfacetei, or ollama.

# See: https://librechat.ai/docs/configuration/rag_api

RAG_OPENAI_API_KEY=

# EMBEDDINGS_PROVIDER=openai