.env.example

# The local database `bun run dev` starts (Prisma's embedded Postgres). It holds one connection and
# skips prepared statements, so keep connection_limit=1&pgbouncer=true.
DATABASE_URL="postgres://postgres:postgres@127.0.0.1:51314/template1?sslmode=disable&connection_limit=1&pgbouncer=true"

# Where Personal Agent Proxy is opened. In development that is Vite, which passes the api's paths on
# to the api on port 4000; in production the api serves the built web app itself.
APP_URL="http://localhost:5173"

# Hashes magic-link tokens. Any long random string in production (openssl rand -hex 32).
AUTH_SECRET="dev-only-secret"

# Encrypts app passwords and Information records. In production: openssl rand -base64 32.
# Changing it makes everything stored with it unreadable.
ENCRYPTION_KEY="ZGV2LW9ubHktZW5jcnlwdGlvbi1rZXktMzItYnl0ZXM="

# Google sign-in, and connecting a Google account. Register http://localhost:5173/auth/google/callback
# and http://localhost:5173/api/connections/google/callback as redirect URIs, and enable the Gmail,
# Calendar, Drive, Sheets, People and Tasks APIs.
# GOOGLE_CLIENT_ID=""
# GOOGLE_CLIENT_SECRET=""

# Sending magic-link emails. Without them, and always in dev, the api prints the link instead.
# RESEND_KEY=""
# EMAIL_FROM=""

# Connecting bank accounts through Plaid: the keys from your Plaid dashboard. In sandbox, Plaid's
# test banks sign in with user_good and pass_good.
# PLAID_CLIENT_ID=""
# PLAID_SECRET=""
# PLAID_ENV="sandbox"

# The home page's widgets: a TypeSafe AI key for Jev, which picks the widget, and an OpenRouter key
# for the model that fills it in. Without both the home page says it is not set up.
# TYPESAFE_API_KEY=""
# OPENROUTER_KEY=""

# Who can create an account: addresses and domains, comma-separated. Unset, anyone can.
# ALLOWED_SIGNUP_EMAILS=""

# Self-hosting reads more; every variable is in the docs' Environment variables page, built from
# packages/api/src/utils/env-schema.ts. `bun run dev` sets NODE_ENV=development on the api.

# Lets connections reach databases and MCP servers on this machine or the local network, as when
# trying one out on localhost. Hosted Personal Agent Proxy leaves it off.
ALLOW_PRIVATE_HOSTS=true