gabriel / musehub public
.env.example
66 lines 3.4 KB
Raw
sha256:34035d72cef530c1ab9d6a6f53be18d803dde705fc3157617d70352a96d0747b Merge branch 'fix/wire-push-external-parent-manifest' into dev Human 8 days ago
1 # MuseHub environment configuration template
2 # Copy to .env and fill in real values for local development.
3 # NEVER commit .env, .env.staging, .env.production, or .env.prod to version control.
4 #
5 # Secret generation:
6 # openssl rand -hex 32 → for WEBHOOK_SECRET_KEY, RUNNER_TOKEN
7 # openssl rand -hex 16 → for DB_PASSWORD
8 #
9 # Environments: local | staging | production
10 # NEVER set DEBUG=true in staging or production — it exposes internals.
11
12 # ── Core ─────────────────────────────────────────────────────────────────────
13
14 MUSE_ENV=local
15 DEBUG=true
16
17 # ── Database ──────────────────────────────────────────────────────────────────
18
19 DATABASE_URL=postgresql+asyncpg://musehub:musehub@postgres:5432/musehub
20 DB_PASSWORD=changeme
21
22 # ── Auth & secrets ────────────────────────────────────────────────────────────
23 # Generate with: openssl rand -hex 32
24
25 WEBHOOK_SECRET_KEY=changeme
26 RUNNER_TOKEN=changeme
27
28 # ── CORS ──────────────────────────────────────────────────────────────────────
29
30 CORS_ORIGINS=http://localhost:3000,https://localhost:1337
31
32 # ── Object storage ────────────────────────────────────────────────────────────
33 # Works with any S3-compatible backend: Cloudflare R2, MinIO, AWS S3.
34 # In Docker dev these are set via docker-compose.override.yml (MinIO).
35
36 # BLOB_STORAGE_BUCKET=muse-objects
37 # BLOB_STORAGE_ENDPOINT=http://localhost:9000
38 # BLOB_STORAGE_PUBLIC_ENDPOINT=http://localhost:9000
39 # BLOB_STORAGE_ACCESS_KEY_ID=minioadmin
40 # BLOB_STORAGE_SECRET_ACCESS_KEY=minioadmin
41 # BLOB_STORAGE_REGION=us-east-1
42
43 MUSEHUB_RELEASES_DIR=/data/releases
44
45 # ── Staging / production guidance ─────────────────────────────────────────────
46 # For staging and production deployments, values are injected into .env by
47 # deploy/secrets.sh from AWS SSM Parameter Store — do not edit .env manually.
48 # Run: MUSEHUB_ENV=staging bash deploy/secrets.sh
49 #
50 # secrets.sh sets all of the following automatically based on MUSEHUB_ENV:
51 #
52 # MUSE_ENV=staging # or 'production'
53 # DEBUG=false
54 # PUBLIC_URL=https://staging.musehub.ai # prod: https://musehub.ai
55 # CORS_ORIGINS=["https://staging.musehub.ai"]
56 # DB_PASSWORD=<from SSM /musehub/staging/DB_PASSWORD>
57 # WEBHOOK_SECRET_KEY=<from SSM /musehub/staging/WEBHOOK_SECRET_KEY>
58 # RUNNER_TOKEN=<from SSM /musehub/staging/RUNNER_TOKEN>
59 # BLOB_STORAGE_BUCKET=musehub-staging # prod: musehub-prod
60 # BLOB_STORAGE_ENDPOINT=https://<account>.r2.cloudflarestorage.com
61 # BLOB_STORAGE_REGION=auto
62 # BLOB_STORAGE_ACCESS_KEY_ID=<from SSM>
63 # BLOB_STORAGE_SECRET_ACCESS_KEY=<from SSM>
64 #
65 # SSM parameters managed at: /musehub/{staging,production}/<NAME>
66 # EC2 IAM role requires: ssm:GetParameter on /musehub/<env>/*
File History 14 commits
sha256:34035d72cef530c1ab9d6a6f53be18d803dde705fc3157617d70352a96d0747b Merge branch 'fix/wire-push-external-parent-manifest' into dev Human 8 days ago
sha256:fc04e4cae9e1774d6a21b65c45daeed0e6787eb581d13aa1b03bfe9384a34226 Merge branch 'fix/two-column-scroll-layout' into dev Human 8 days ago
sha256:408916fc5973ba59c6e4eebaa80ebdcc801c0a63205651e25009d11548f79454 chore: bump version to 0.2.0.dev2 — nightly.2, matching muse Sonnet 4.6 patch 11 days ago
sha256:d035733f21ccff27735fddebfbbe0ed24565a32a22db8de5885402262671ecd2 chore: bump version to 0.2.0rc15 for musehub#113 fix release Sonnet 4.6 patch 14 days ago
sha256:0032d6cfa33bc3c8367436ad768e7dd0e339b4332153160247da8266cb5fa352 Merge branch 'task/version-tags-phase3-server' into dev Human 17 days ago
sha256:4669620efda9ff41c55bdefd1f7bfe1c239d468428744c84ead9957e5a003a53 merge: rescue snapshot-recovery hardening (c00aa21d) into d… Opus 4.8 minor 29 days ago
sha256:a59da49c4611b970fc4b6ae48678ce4943261c213a07ddbd73ce9201df869b4a fix: remove false-positive proposal_comments index drop fro… Sonnet 4.6 patch 33 days ago
sha256:0a240d6dbff234f07d98a28a4a9a68db702f3f9ff9260196f24219bdb1c0b6f3 feat: render markdown mists as HTML with heading anchor links Sonnet 4.6 patch 34 days ago
sha256:24a7d47486ebc4ebd1832830580e177ec6f877b48dced8c000e198cdec4ce9d6 Merge 'task/bump-version-rc12' into 'dev' — proposal: Bump … Human 35 days ago
sha256:b9ff931d147e0114a1f17060f415b89ed551c170a91ff226c70437aa5c85f9ee Merge 'task/bump-version-rc12' into 'dev' — proposal: Bump … Human 35 days ago
sha256:d1122d21e73471879b460037b22c0b50fded7c423444a176f248428f75dac39c Merge 'task/fix-issue-pagination-cursor' into 'dev' — propo… Human 35 days ago
sha256:01e18975e73d2b3cd5b6db7929c895bef9aa6e0d4391dc5b2adfc548b41318dd Merge 'feat/adding-debug-logs-to-staging' into 'dev' — prop… Human 35 days ago
sha256:6b1949fc2797ca4c1936a637a4cbfec828ef56cf52398a2e74ca3c4f494e728f fix: use wire_bytes not mpack_bytes_raw in compute_object_b… Sonnet 4.6 patch 48 days ago
sha256:b99f2455dc346966d040133f5203297e6e3ef5803a93728a2c30568d0a0f7583 rename: delta_add → delta_upsert across wire format, models… Sonnet 4.6 patch 50 days ago