.env.deploy.example

# Server-side configuration for the deployment. Copy to .env.deploy and fill in.
# .env.deploy is gitignored. Nothing here reaches the browser bundle.
#
# Names only. Every variable below is read by code in this repository; the list
# is generated from that code rather than remembered, so a name here is a name
# something consumes. Anything the product can run without is marked optional,
# and the screen says so when it is absent rather than failing quietly.

# --- HydraDB Cloud: what the deployment actually reads ------------------------
# The managed service. This is the profile production runs on, and the one that
# makes /api/health, /judge, the graph walk and the MCP endpoint answer.
HYDRA_CLOUD_URL=
HYDRA_CLOUD_TOKEN=
# Database and collection scope. Load bearing: a status poll that omits the
# collection a source was ingested into answers FILE_NOT_FOUND for a source
# that ingested successfully.
HYDRA_DATABASE=
HYDRA_COLLECTION=

# --- Self-hosted HydraDB node: the benchmark and development profile ---------
# Not what the deployment uses. A Vercel function cannot dial a node on
# loopback, and the benchmarks and the contract suite run against this one.
# Select it with LACUNA_PROFILE=node.
LACUNA_PROFILE=
HYDRA_HTTP_URL=
HYDRA_NAMESPACE=
HYDRA_GRAPH=
HYDRA_CELL=
HYDRA_TOKEN=
# Allows a non-loopback node over plain HTTP. Development only; a token sent
# unencrypted to a remote host is a token you have given away.
HYDRA_ALLOW_PLAINTEXT_REMOTE=

# --- Google sign in: optional --------------------------------------------------
# Absent, the button is not offered rather than offered and broken. The redirect
# URI registered with the client must be exactly
# ${LACUNA_SITE_ORIGIN}/api/auth/google/callback, with no trailing slash: a
# preview URL or a stray slash is a mismatch and a refused sign in.
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
# The public origin, used to build that redirect URI. No trailing slash.
LACUNA_SITE_ORIGIN=

# --- Private file imports: optional ------------------------------------------
# Dedicated server-only HMAC key for short-lived file preview tokens. Generate
# one with: node -e "console.log(require('node:crypto').randomBytes(32).toString('base64url'))"
# Do not reuse Hydra, OAuth, session, cursor, or webhook credentials. Without a
# valid key the file catalogue is truthfully unavailable and no upload is read.
LACUNA_FILE_PREVIEW_KEY=

# --- Local account store: only where a filesystem exists ----------------------
# The deployment keeps accounts in HydraDB Cloud and ignores this. A local run
# without a cloud database writes them here instead.
LACUNA_ACCOUNTS_DIR=

# --- Model providers: optional, and none is used on the answer path -----------
# No model is called to answer a question. These configure the provider list the
# product reports, and a deployment with none of them says so.
GROQ_API_KEY=
ANTHROPIC_API_KEY=
DEEPSEEK_API_KEY=
# Local runtimes. A base URL rather than a key, because there is nobody to bill.
OLLAMA_BASE_URL=
VLLM_BASE_URL=

# --- Voice: optional, and currently not configured anywhere -------------------
# The screen says VOICE NOT CONFIGURED rather than animating a state it cannot
# prove. Setting this does not by itself make voice work; see docs.
ELEVENLABS_API_KEY=