env_template

# Any of the secret values below can instead be supplied as a Docker secret,
# mounted at /run/secrets/<NAME>. A mounted secret takes precedence over the
# value here; where nothing is mounted, this file is used unchanged. See
# src/util/secrets.py for the list of names.
#
LOG_INFO=info
OPENAI_API_KEY=
POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres
POSTGRES_CHAINLIT_DB=chatbio_chainlit
POSTGRES_LANGGRAPH_DB=chatbio_langgraph
PGADMIN_DEFAULT_EMAIL=test@test.com
PGADMIN_DEFAULT_PASSWORD=test
CHAT_ENV=reactome
CLOUDFLARE_SECRET_KEY=
CLOUDFLARE_SITE_KEY=0x4AAAAAAAkzFQ5GRs2toYuv
CHAINLIT_IMAGE=public.ecr.aws/reactome/reactome-chatbot:latest
#CHAINLIT_IMAGE=reactome-chatbot
CHAINLIT_URI=/chat
CHAINLIT_ROOT_PATH=
TAVILY_API_KEY=

# Embedding model. Leave unset: it defaults to whatever built the installed
# bundle, which is what the stored vectors were produced with. Setting it to
# anything else makes retrieval meaningless.
#EMBEDDING_MODEL=
# LLM used for answers; defaults to gpt-4o-mini.
# gpt-5.6-luna is verified to work end to end. It answers with noticeably more
# grounding in the retrieved Reactome records, and takes roughly twice as long
# per question (41s vs 22s, averaged over three questions).
#LLM_MODEL=
# Sampling temperature. Leave unset: it defaults to 0.0, except for the
# gpt-5.5/5.6/6 families, which accept only their own default of 1 and return a
# 400 for anything else. Set this only for a model that rule does not yet know
# about; see resolve_temperature in src/agent/graph.py.
#LLM_TEMPERATURE=

# Locale and timezone for the Postgres container's initdb (ICU collation).
LOCALE=en_US
TIMEZONE=America/Toronto
# The guest instance's public URI, served alongside the authenticated one.
CHAINLIT_URI_NO_LOGIN=

# OAuth sign-in. Only the providers whose CLIENT_ID is set are offered; leave a
# pair blank to disable that provider. The *_SECRET values can be supplied as
# Docker secrets instead (see the note at the top).
#OAUTH_AUTH0_CLIENT_ID=
#OAUTH_AUTH0_CLIENT_SECRET=
#OAUTH_AUTH0_DOMAIN=
#OAUTH_GOOGLE_CLIENT_ID=
#OAUTH_GOOGLE_CLIENT_SECRET=
#OAUTH_ORCID_CLIENT_ID=
#OAUTH_ORCID_CLIENT_SECRET=
# Signs the session cookie. Required for any OAuth provider to work.
#CHAINLIT_AUTH_SECRET=