.env

# Default environment variables are taken from this `.env` file
# This base file is extended by the other `.env.*` files in this repository
# Do not change this file unless you intend to change defaults for dev or testing
# Locally override these variables by creating a `.env.local` or `.env.*.local` file

DUMMY_EMAIL_TRANSPORTER_FILE_PATH=var/api/dummy-email-transporter/email-dumps.yml
DUMMY_EMAIL_TRANSPORTER_USE_CLIPBOARD=true

FRONTEND_URL=http://localhost:3000
HASH_GRAPH_ALLOWED_URL_DOMAIN_PATTERN="(?:http://localhost:3000|https://hash\\.ai)/@(?P<shortname>[\\w-]+)/types/(?P<kind>(?:data-type)|(?:property-type)|(?:entity-type))/[\\w\\-_%]+/"

HASH_INTEGRATION_QUEUE_NAME=integration
HASH_EMAIL_TRANSPORTER=dummy

INTERNAL_API_KEY=development-api-key

HASH_OPENSEARCH_ENABLED=false
HASH_OPENSEARCH_HOST=localhost
HASH_OPENSEARCH_PASSWORD=admin
HASH_OPENSEARCH_PORT=9200
HASH_OPENSEARCH_USERNAME=admin

POSTGRES_PORT=5432

POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres

HASH_KRATOS_PG_USER=kratos
HASH_KRATOS_PG_PASSWORD=kratos
HASH_KRATOS_PG_DATABASE=kratos
HASH_KRATOS_PUBLIC_URL=http://127.0.0.1:4433
HASH_KRATOS_ADMIN_URL=http://127.0.0.1:4434
KRATOS_API_KEY=secret
KRATOS_COOKIE_DOMAIN=localhost
KRATOS_SECRETS_COOKIE=VERY-INSECURE-AND-SHOULD-ONLY-BE-USED-IN-DEV
KRATOS_SECRETS_CIPHER=32-LONG-SECRET-NOT-SECURE-AT-ALL

HASH_HYDRA_PUBLIC_URL=http://127.0.0.1:4444
HASH_HYDRA_ADMIN_URL=http://127.0.0.1:4445
HASH_HYDRA_PG_USER=hydra
HASH_HYDRA_PG_PASSWORD=hydra
HASH_HYDRA_PG_DATABASE=hydra
HASH_HYDRA_SECRETS_SYSTEM=VERY-INSECURE-AND-SHOULD-ONLY-BE-USED-IN-DEV
HASH_HYDRA_SECRETS_COOKIE=VERY-INSECURE-AND-SHOULD-ONLY-BE-USED-IN-DEV

HASH_SPICEDB_VERSION=1.28.0
HASH_SPICEDB_GRPC_PRESHARED_KEY=secret
HASH_SPICEDB_HOST=http://127.0.0.1
HASH_SPICEDB_HTTP_PORT=8443
HASH_SPICEDB_GRPC_PORT=50051
HASH_SPICEDB_PG_USER=spicedb
HASH_SPICEDB_PG_PASSWORD=spicedb
HASH_SPICEDB_PG_DATABASE=spicedb

HASH_VAULT_HOST=http://127.0.0.1
HASH_VAULT_PORT=8200
HASH_VAULT_ROOT_TOKEN=dev_root_token

HASH_TEMPORAL_VERSION=1.23.1.0
HASH_TEMPORAL_UI_VERSION=2.27.2
HASH_TEMPORAL_SERVER_HOST=http://localhost
HASH_TEMPORAL_SERVER_PORT=7233
HASH_TEMPORAL_UI_PORT=3100

HASH_TEMPORAL_PG_USER=temporal
HASH_TEMPORAL_PG_PASSWORD=temporal
HASH_TEMPORAL_PG_DATABASE=temporal
HASH_TEMPORAL_VISIBILITY_PG_DATABASE=temporal_visibility

HASH_GRAPH_PG_USER=graph
HASH_GRAPH_PG_PASSWORD=graph
HASH_GRAPH_PG_DATABASE=graph
HASH_GRAPH_LOG_LEVEL=info

HASH_GRAPH_TYPE_FETCHER_HOST=localhost
HASH_GRAPH_TYPE_FETCHER_PORT=4455

HASH_GRAPH_REALTIME_PG_USER=realtime
HASH_GRAPH_REALTIME_PG_PASSWORD=realtime

HASH_GRAPH_HTTP_HOST=127.0.0.1
HASH_GRAPH_HTTP_PORT=4000
HASH_GRAPH_RPC_HOST=127.0.0.1
HASH_GRAPH_RPC_PORT=4002
HASH_GRAPH_TEST_API_HOST=127.0.0.1
HASH_GRAPH_TEST_API_PORT=4001

HASH_REALTIME_PORT=3333
HASH_REDIS_HOST=localhost
HASH_REDIS_PORT=6379

HASH_OTLP_ENDPOINT=http://localhost:4317

HASH_SEARCH_LOADER_PORT=3838
HASH_SEARCH_QUEUE_NAME=search

LOG_LEVEL=info

API_ORIGIN=http://localhost:5001

# Whether or not the realtime service and things depending on it are enabled (e.g. integration 2-way sync)
ENABLE_REALTIME_SYNC=true

# Optional usage telemetry for HASH
HASH_TELEMETRY_ENABLED=false
# Currently our endpoint doesn't have HTTPS so this is set to false
HASH_TELEMETRY_HTTPS=false
# DNS collector endpoint
HASH_TELEMETRY_DESTINATION=REPLACE_ME.aws.com
# Is used for differentiating different apps, can be any value
HASH_TELEMETRY_APP_ID=hash-app

###########################################
# Disable telemetry from third-party dependencies who transmit IP addresses
###########################################
# Vercel Next.js
NEXT_TELEMETRY_DISABLED=1
# Vercel Turborepo
TURBO_TELEMETRY_DISABLED=1
# Yarn
YARN_ENABLE_TELEMETRY=0
# Artillery
ARTILLERY_DISABLE_TELEMETRY=true
# Terraform and others
CHECKPOINT_DISABLE=1

###########################################
## Aliases for dockerized external services
###########################################
##
## These variables are consumed in apps/hash-external-services/docker-compose.yml → env_file.
## Using `env` → POSTGRES_USER=${HASH_PG_USER} does not give access to values in this file.