SimpleAuditStudio/.env.dev.example at main · SimulaMet/SimpleAuditStudio · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
# =============================================================================
# SimpleAudit Studio — local development
#
# Copy to `.env` (manage.py loads it automatically), then:
#
#   uv sync --extra dev
#   uv run manage.py setup_local              # first time: + seed data
#   uv run manage.py dev                       # daily
#
# SQLite holds the app data and `dev` starts its own embedded Hatchet queue,
# so no Docker is needed. For production use Docker Compose with `.env.example`.
#
# Only what the dev flow actually reads is uncommented below. Settings the dev
# server does not use are kept as documented examples at the bottom.
# =============================================================================

# --- Django -----------------------------------------------------------------
DJANGO_SECRET_KEY=local-dev-key-not-for-prod
DJANGO_DEBUG=true
DJANGO_ALLOWED_HOSTS=*
LOG_LEVEL=DEBUG

# --- Bootstrap (read by setup_local / bootstrap_platform) ----------------------
BOOTSTRAP_USERNAME=studio
BOOTSTRAP_EMAIL=admin@example.local
BOOTSTRAP_PASSWORD=localdevpass123
BOOTSTRAP_PROJECT_NAME=Default

# --- Database -----------------------------------------------------------------
# `manage.py dev` is SQLite-first by design (zero setup) and force-enables
# SQLite; Postgres is the Compose/deployment engine (see `.env.example` +
# docker-compose.yml).
SIMPLEAUDIT_LOCAL_SQLITE=1
# Where the SQLite file lives. Relative paths resolve from the repo root;
# absolute paths are used as-is. Unset/commented = `<repo>/dev.sqlite3`.
SIMPLEAUDIT_SQLITE_PATH=dev.sqlite3

# JSON result files shown by /visualizer/. The folder is created on demand;
# set an absolute path when results live elsewhere.
VISUALIZER_RESULTS_DIR=./results
# Bounded-scan limits for the visualizer file tree (defaults shown):
# VISUALIZER_MAX_INSPECTED_FILES=5000
# VISUALIZER_SCAN_TIME_BUDGET_S=5
# VISUALIZER_MAX_TREE_DEPTH=8
# VISUALIZER_MAX_FILE_SIZE_MB=100

# --- Gravatar avatars -----------------------------------------------------------
# Off by default: the user's initial is shown. Set to "true" to load avatars
# from gravatar.com (the browser sends the MD5 hash of the user's email there).
#   SIMPLEAUDIT_GRAVATAR=true

# --- Extensions -----------------------------------------------------------------
# Off by default. Inline JSON or a path to a JSON manifest (docs/extensions.md).
# Its scripts run with full same-origin privileges: operator code only.
#   SIMPLEAUDIT_EXTENSIONS=docs/examples/extensions.json

# --- Chat (Open WebUI) ----------------------------------------------------------
# On by default in dev; no line needed. To force it off:
#   SIMPLEAUDIT_CHAT=off          (env)
#   manage.py dev --disable-chat  (flag; wins over the env value)

# Export Open WebUI's spans to Studio's OTLP listener. ON by default (same as
# `uvx simpleaudit-studio`): agent audits use the spans as real trace evidence.
# Set to false to opt out — an explicit value here wins over the default.
#SIMPLEAUDIT_CHAT_OTLP=true

# =============================================================================
# OPTIONAL — commented out because `manage.py dev` does not read these.
# Un-comment only for the stated use case.
# =============================================================================

# Label for the in-process audit worker pool (default: cpu).
# WORKER_POOL=cpu

# Domain DB on a running local Postgres instead of SQLite. Requires
# SIMPLEAUDIT_LOCAL_SQLITE=0 above (dev is SQLite-first and force-enables it)
# plus a Postgres server on these coordinates. Niche — most people stay on
# SQLite. The embedded Hatchet always uses its own bundled Postgres, not
# these. (Also set SIMPLEAUDIT_MODE=dev so `manage.py mode` can resolve —
# without the SQLite flag, mode inference has no unambiguous signal left.)
# POSTGRES_DB=simpleaudit
# POSTGRES_USER=simpleaudit
# POSTGRES_PASSWORD=localdevpass123
# POSTGRES_HOST=localhost
# POSTGRES_PORT=5432

# External Hatchet server — Compose mode only (dev starts an embedded engine).
# HATCHET_SERVER_URL=http://localhost:8888
# HATCHET_GRPC_URL=localhost:7077
# HATCHET_API_KEY=
# HATCHET_TOKEN_FILE=./hatchet-token
# HATCHET_TLS_STRATEGY=none

# Sentry error reporting — add a DSN to enable; commented out = disabled.
# SENTRY_DSN=
# SENTRY_ENVIRONMENT=development

# --- SimpleAudit engine ---------------------------------------------------------
# No configuration needed: the engine is a pip dependency pinned in
# pyproject.toml. To develop against an unmerged engine revision, create a
# gitignored simpleaudit-dependency.yaml at the project root containing ONLY:
#     git_ref: <full-40-char-sha>
# That value is recorded as the run's git_commit provenance. Do NOT edit
# pyproject.toml for a dev override.

# --- Model API keys (optional) ---------------------------------------------------
# Keys can be stored on a connection in the Models page. For connections set
# to "Environment variable", add that variable here (read when a run starts),
# e.g.:
# SIMULACHAT_API_KEY=sk-...

# OTLP receiver hardening. Set false to reject exports that carry no
# Authorization header (breaks Open WebUI's credential-less exporter).
#SIMPLEAUDIT_OTLP_ALLOW_UNAUTHENTICATED=true
#SIMPLEAUDIT_OTLP_MAX_BODY_BYTES=8388608
#SIMPLEAUDIT_OTLP_HOLD_SECONDS=600
#SIMPLEAUDIT_OTLP_AUTH_CACHE_SECONDS=30