compose.env.example

# Optional overrides for `docker compose --env-file compose.env ...`.
# The default stack needs no env file and listens only on 127.0.0.1.

# Image selection. Compose pins published AgentConnect images to linux/amd64.
# AGENTCONNECT_VERSION=latest
# AGENTCONNECT_IMAGE_REGISTRY=ghcr.io/agentconnect-md
# AGENTCONNECT_PRISMA_CLI_VERSION=7.8.0-node24-r1

# Host exposure and browser-reachable URLs. If you change a port, keep its
# corresponding public URL in sync. Do not expose a no-auth stack publicly.
# AGENTCONNECT_BIND_ADDRESS=127.0.0.1
# AGENTCONNECT_WEB_PORT=3000
# AGENTCONNECT_CP_PORT=8080
# AGENTCONNECT_RELAY_PORT=8090
# AGENTCONNECT_PUBLIC_WEB_URL=http://localhost:3000
# AGENTCONNECT_PUBLIC_CP_URL=http://localhost:8080
# AGENTCONNECT_PUBLIC_RELAY_URL=http://localhost:8090
# AGENTCONNECT_RELAY_DAEMON_URL=ws://localhost:8090

# Replace all three before using the stack beyond throwaway local evaluation.
# Use URL-safe characters for the Postgres password because it is embedded in a
# connection URL. API_KEY_PEPPER and RELAY_TOKEN must each be at least 32 chars.
# AGENTCONNECT_POSTGRES_PASSWORD=replace-with-a-url-safe-password
# AGENTCONNECT_API_KEY_PEPPER=replace-with-a-stable-random-32-char-secret
# AGENTCONNECT_RELAY_TOKEN=replace-with-a-stable-random-32-char-secret

# Usage reporting from outside the daemon plane. Deployments that meter sessions
# upstream of any daemon can POST cumulative per-session usage to
# /api/v1/internal/usage/reports with this bearer (at least 32 chars); those rows
# are stored as `gateway` alongside the `daemon` rows daemons report. Unset (the
# default) leaves that endpoint unregistered — daemons stay the only usage ingress.
# USAGE_INGEST_TOKEN=replace-with-a-stable-random-32-char-secret

# Connectors. The gateway runs in the stack and is reachable only on loopback.
# Set an encryption key before real use: without it, connector credentials and
# OAuth client secrets are plaintext in that service's own SQLite volume, which
# SECRET_CIPHER does not cover. Do not set an admin token; the integration sends none.
# AGENTCONNECT_OPEN_CONNECTOR_PORT=3100
# OOMOL_CONNECT_ENCRYPTION_KEY=replace-with-a-stable-random-32-char-secret
# Require a bearer on the gateway's runtime API. This one value configures both the
# gateway and the relay that calls it; unset leaves runtime auth off on both.
# OOMOL_CONNECT_RUNTIME_TOKEN=replace-with-a-stable-random-32-char-secret
# OAuth providers redirect to <origin>/oauth/callback, so the origin must be
# browser-reachable. Set it when the stack is not on localhost.
# AGENTCONNECT_PUBLIC_OPEN_CONNECTOR_URL=http://localhost:3100
# Narrow the browsable catalog. Whitelist `*` or unset => every service. The
# blocklist defaults to the services that overlap AgentConnect's own integrations.
# OPEN_CONNECTOR_PROVIDER_WHITELIST=*
# OPEN_CONNECTOR_PROVIDER_BLOCKLIST=github,gitlab,gitea,linear,slack,slackbot,telegram,discord,discordbot,feishu,feishu_app_bot,feishu_custom_bot,google_chat

# Browser authentication, provider Apps, displayed sign-in methods, the browser
# API Resource, and preset-agent behavior are configured in Setup and
# stored in the deployment database. They are not Compose overrides.

# External Logto service locations are process topology because Setup Server
# needs them before it can open the deployment configuration. The bundled Logto
# overlay supplies local defaults, so set these only for an external tenant.
# LOGTO_ENDPOINT=https://login.example.test
# LOGTO_ADMIN_ENDPOINT=https://admin.example.test
# OIDC_ISSUER=https://login.example.test/oidc
# LOGTO_MGMT_ENDPOINT=https://tenant-id.logto.app