.env.example

# =============================================================================
# ZeroInc — Environment Configuration
# Copy this file to .env and fill in the values:  cp .env.example .env
# All secrets MUST be changed for production.
# =============================================================================

# --- Required (must set before first run) ------------------------------------

# Secret for BetterAuth session signing. Generate with:
#   openssl rand -base64 32
BETTER_AUTH_SECRET=

# PostgreSQL password for the database container.
# Generate with:  openssl rand -base64 24
POSTGRES_PASSWORD=

# --- Database ----------------------------------------------------------------

POSTGRES_USER=zeroinc
POSTGRES_DB=zeroinc
POSTGRES_PORT=5432

# --- ZeroInc Server ----------------------------------------------------------

# External URL agents and users will connect to.
PAPERCLIP_PUBLIC_URL=http://localhost:3100
PAPERCLIP_PORT=3100

# Deployment mode:
#   "authenticated" — requires login (recommended for production)
#   "open"          — no auth needed
PAPERCLIP_DEPLOYMENT_MODE=authenticated

# Exposure:
#   "private" — only accessible from configured origins
#   "public"  — open to any origin (not recommended for production)
PAPERCLIP_DEPLOYMENT_EXPOSURE=private

# --- AI Provider API Keys (optional — only if using cloud-hosted agents) -----

OPENAI_API_KEY=
ANTHROPIC_API_KEY=