.env.example

# Morphic on Render — environment contract
#
# On Render, most of these are set for you by render.yaml:
#   - DATABASE_URL / DATABASE_RESTRICTED_URL come from the morphic-db database
#   - NODE_ENV, ENABLE_AUTH, ANONYMOUS_USER_ID, SEARCH_API, and
#     NODE_TLS_REJECT_UNAUTHORIZED come from the morphic-render env group
#
# You only need to provide the secrets in the REQUIRED section below.
# This file documents the full contract; see the README for details.
# For local development, copy the richer upstream file .env.local.example instead.

# =============================================================================
# REQUIRED (set at Apply, or on the morphic service afterward)
# =============================================================================

# Neural web search. Get a key at https://dashboard.exa.ai/
EXA_API_KEY=

# One LLM provider key. Set at least one; Morphic detects available models.
OPENAI_API_KEY=
# ANTHROPIC_API_KEY=
# GOOGLE_GENERATIVE_AI_API_KEY=
# AI_GATEWAY_API_KEY=

# =============================================================================
# WIRED AUTOMATICALLY BY render.yaml (do not set manually on Render)
# =============================================================================

# DATABASE_URL=              # from morphic-db (fromDatabase)
# DATABASE_RESTRICTED_URL=   # from morphic-db (fromDatabase)

# =============================================================================
# SET BY THE morphic-render ENV GROUP (override only if you know why)
# =============================================================================

# NODE_ENV=production
# ENABLE_AUTH=false
# ANONYMOUS_USER_ID=anonymous-user
# SEARCH_API=exa
# Required for Render managed Postgres TLS with upstream's strict verification.
# See the Security section of the README before changing this.
# NODE_TLS_REJECT_UNAUTHORIZED=0

# =============================================================================
# OPTIONAL FEATURES
# =============================================================================

# Alternative search providers (set SEARCH_API to match)
# TAVILY_API_KEY=
# FIRECRAWL_API_KEY=

# Multi-user auth (set ENABLE_AUTH=true)
# NEXT_PUBLIC_SUPABASE_URL=
# NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY=
# SUPABASE_SECRET_KEY=

# File uploads (Cloudflare R2 / S3-compatible). Leave unset to disable.
# R2_ACCOUNT_ID=
# S3_ENDPOINT=
# R2_ACCESS_KEY_ID=
# R2_SECRET_ACCESS_KEY=
# R2_BUCKET_NAME=user-uploads
# R2_PUBLIC_URL=