.env.example

# Flowfile Docker Environment Configuration
# Copy this file to .env and customize for your deployment
# IMPORTANT: Never commit the .env file to version control!

# ============================================
# Master Encryption Key
# ============================================
# Encrypts all user secrets (API keys, passwords, tokens) stored in Flowfile.
# Generate with: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
# Or use the setup screen in the UI to generate one.
#
# You can set this here OR use a Docker secret file (master_key.txt).
# If both are set, the environment variable takes precedence.
# FLOWFILE_MASTER_KEY=

# ============================================
# Admin User Credentials
# ============================================
# The default admin account created on first startup
FLOWFILE_ADMIN_USER=admin
FLOWFILE_ADMIN_PASSWORD=changeme

# ============================================
# JWT Authentication
# ============================================
# Secret key for signing JWT tokens (min 32 characters)
# Generate with: openssl rand -hex 32
JWT_SECRET_KEY=your-secure-jwt-secret-key-change-in-production

# ============================================
# Internal Service Token
# ============================================
# Shared secret for kernel → Core API authentication.
# Core passes this token to kernel containers automatically.
# Generate with: openssl rand -hex 32
FLOWFILE_INTERNAL_TOKEN=your-secure-internal-token-change-in-production

# ============================================
# AI Subsystem Feature Flag
# ============================================
# Master switch for the /ai/* router (BYOK settings, chat stream, agent
# endpoints). Defaults to ON when this variable is unset. Accepts:
# true | 1 | yes | on (case-insensitive); anything else disables it.
#
# Production guidance: explicitly set FEATURE_FLAG_AI=false until BYOK
# credentials are configured for your operators. With the flag on and no
# BYOK rows saved, providers fall back to environment variables
# (ANTHROPIC_API_KEY, OPENAI_API_KEY, GEMINI_API_KEY, …) — set those
# intentionally or leave the flag off.
# FEATURE_FLAG_AI=true

# ============================================
# AI Rate Limits (per-provider, optional)
# ============================================
# Soft per-provider request budgets enforced by flowfile_core/ai/scheduler.
# Unset → no enforcement (only 429 Retry-After hints throttle). Suggested
# defaults below match the free-tier limits commonly published by each
# vendor; raise them if you have a paid tier or lower if you want to
# stay well clear. Ollama is always unlimited regardless of these vars.
#
# Limits are enforced **per worker process** — the scheduler keeps RPM/RPD
# state in in-memory deques. With gunicorn -w N (or any multi-worker
# deploy), the effective aggregate is roughly N × the configured value.
# Pin to a single worker, divide your intended budget by the worker count,
# or accept the headroom.
#
# FLOWFILE_AI_ANTHROPIC_RPM=
# FLOWFILE_AI_ANTHROPIC_RPD=
# FLOWFILE_AI_OPENAI_RPM=
# FLOWFILE_AI_OPENAI_RPD=
# FLOWFILE_AI_GOOGLE_RPM=15
# FLOWFILE_AI_GOOGLE_RPD=1500
# FLOWFILE_AI_GROQ_RPM=30
# FLOWFILE_AI_GROQ_RPD=
# FLOWFILE_AI_OPENROUTER_RPM=
# FLOWFILE_AI_OPENROUTER_RPD=

# ============================================
# AI Prompt Logging (dev / debugging only)
# ============================================
# When set to true, every LLM call routed through the AI subsystem writes a
# single JSONL line to {FLOWFILE_STORAGE_DIR}/ai_prompts/YYYY-MM-DD.jsonl
# capturing the full system prompt, message history, tool catalog, response,
# and timing. Default off — this is a dev hatch for diagnosing agent
# behaviour, not a production audit trail (the W15 audit DB is for that).
# Files rotate daily by filename; the operator manages disk space.
# Tail with: python -m flowfile_core.ai.prompt_log tail
# Accepts: true | 1 | yes | on (case-insensitive).
# FLOWFILE_AI_LOG_PROMPTS=false

# Optional: scrub user / tool message bodies through the regex PII pipeline
# before writing. System prompts and assistant responses are NEVER scrubbed
# (the whole point is to read what the model saw and what it said back).
# Off by default; opt in when sharing transcripts with collaborators.
# FLOWFILE_AI_LOG_PROMPTS_SCRUB=false