- Schedules web UI (/settings/crons): list, add, edit, pause/resume, delete jobs - cron task type: full orchestrator tool loop on a schedule, result → notification channel - parse_schedule: monthly/yearly formats (monthly:DD:HH:MM, yearly:MM:DD:HH:MM) - HA inbound webhook tools toggle: orchestrator loop vs. direct LLM, configurable in UI - ae_db_query/describe/show_view: SELECT-only Aether MariaDB access (admin, per-user creds) - /settings/integrations: admin-only page for Aether DB credentials - Schedules nav link added to all settings pages - pymysql added to requirements - Docs updated: HELP.md, MASTER.md, CLAUDE.md Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
119 lines
5.9 KiB
Plaintext
119 lines
5.9 KiB
Plaintext
# Cortex .env reference — copy to .env and fill in values
|
|
# DO NOT commit .env — it contains secrets
|
|
|
|
# ── Agent identity ───────────────────────────────────────────────────────────
|
|
# Global display names used in distillation prompts and session logs.
|
|
# Individual persona identities live in home/{username}/persona/{name}/IDENTITY.md
|
|
AGENT_NAME=Inara
|
|
USER_NAME=Scott
|
|
|
|
# ── Home directory ────────────────────────────────────────────────────────────
|
|
# Root for all user/persona data. Layout: home/{username}/persona/{name}/
|
|
# Relative paths are resolved from the cortex/ directory.
|
|
# Default: ../home (i.e. Cortex_and_Inara_dev/home/)
|
|
# HOME_DIR=../home
|
|
|
|
# ── Google OAuth — "Sign in with Google" ────────────────────────────────────
|
|
# Create credentials at console.cloud.google.com → APIs & Services → Credentials
|
|
# Application type: Web Application
|
|
# Authorised redirect URI: https://cortex.dgrzone.com/auth/google/callback
|
|
# Pre-register users: cd cortex && .venv/bin/python manage_passwords.py google-add <user> <email>
|
|
# Per-user Gemini key: add "gemini_api_key": "AIza..." to home/{username}/auth.json
|
|
GOOGLE_CLIENT_ID=
|
|
GOOGLE_CLIENT_SECRET=
|
|
|
|
# ── Session auth ─────────────────────────────────────────────────────────────
|
|
# Generate with: python3 -c "import secrets; print(secrets.token_hex(32))"
|
|
JWT_SECRET=change-me-in-dotenv
|
|
JWT_EXPIRE_DAYS=30
|
|
|
|
# ── SMTP (invite emails + future notifications) ───────────────────────────────
|
|
SMTP_SERVER=linode.oneskyit.com
|
|
SMTP_PORT=465
|
|
SMTP_USERNAME=send_mail
|
|
SMTP_PASSWORD=
|
|
SMTP_FROM_EMAIL=noreply@oneskyit.com
|
|
SMTP_FROM_NAME=Cortex
|
|
# Base URL included in invite links
|
|
CORTEX_BASE_URL=https://cortex.dgrzone.com
|
|
|
|
# ── Server ──────────────────────────────────────────────────────────────────
|
|
HOST=0.0.0.0
|
|
PORT=8000
|
|
|
|
# ── Google Chat bot ──────────────────────────────────────────────────────────
|
|
# JWT audience for verifying inbound Workspace Add-on Chat webhook requests.
|
|
# For Workspace Add-on Chat apps, the aud claim = the endpoint URL.
|
|
# Leave blank to disable verification (dev/testing only).
|
|
GOOGLE_CHAT_AUDIENCE=https://cortex.dgrzone.com/channels/google-chat
|
|
|
|
# ── Nextcloud Talk bot ───────────────────────────────────────────────────────
|
|
NEXTCLOUD_URL=https://cloud.dgrzone.com
|
|
NEXTCLOUD_TALK_BOT_SECRET=
|
|
|
|
# ── LLM backends ────────────────────────────────────────────────────────────
|
|
# Primary backend: "claude", "gemini", or "local" (switchable at runtime via UI)
|
|
PRIMARY_BACKEND=claude
|
|
|
|
# Timeouts in seconds
|
|
TIMEOUT_CLAUDE=60
|
|
TIMEOUT_GEMINI=120
|
|
TIMEOUT_LOCAL=300 # local models may need time to load
|
|
|
|
# ── Local model (Open WebUI / Ollama — OpenAI-compatible API) ────────────────
|
|
# Leave LOCAL_API_URL blank to disable. When set, "local" appears as a backend option.
|
|
# API key: Open WebUI → Settings → Account → API Keys
|
|
# Model: workspace alias or full Ollama model name
|
|
LOCAL_API_URL=http://192.168.32.19:3000
|
|
LOCAL_API_KEY=
|
|
LOCAL_MODEL=test-agent-simple
|
|
|
|
# ── Orchestrator (Gemini API — not Gemini CLI) ───────────────────────────────
|
|
# Required for /orchestrate endpoint and tool use
|
|
# Free tier key: https://aistudio.google.com/apikey
|
|
GEMINI_API_KEY=
|
|
|
|
# Model for the orchestration tool loop (not the user-facing response)
|
|
ORCHESTRATOR_MODEL=gemini-2.5-flash
|
|
|
|
# Safety cap on tool loop iterations
|
|
ORCHESTRATOR_MAX_ROUNDS=10
|
|
|
|
# ── DuckDuckGo search ────────────────────────────────────────────────────────
|
|
# Leave blank for free unauthenticated tier
|
|
# Set to your API key for higher rate limits (paid DuckDuckGo account)
|
|
DDG_API_KEY=
|
|
DDG_MAX_RESULTS=5
|
|
|
|
# ── Aether Platform API ───────────────────────────────────────────────────────
|
|
# Used by orchestrator tools: ae_journal_search, ae_journal_entry_create, ae_task_list
|
|
# Same values as agents_sync/mcp/.env — copy from there
|
|
AE_API_URL=https://dev-api.oneskyit.com
|
|
AE_API_KEY=
|
|
AE_ACCOUNT_ID=
|
|
AE_API_TIMEOUT=15
|
|
|
|
# ── Aether MariaDB (direct — SELECT-only via ae_db_query/describe/show_view tools) ─
|
|
# Configured per-user in home/{username}/channels.json — NOT in .env.
|
|
# Add this block to the user's channels.json to enable the tools:
|
|
#
|
|
# "aether_db": {
|
|
# "host": "192.168.64.5",
|
|
# "port": 3306,
|
|
# "name": "aether_dev",
|
|
# "user": "aether_dev",
|
|
# "password": "..."
|
|
# }
|
|
|
|
# ── Distillation schedule ────────────────────────────────────────────────────
|
|
SCHEDULER_TIMEZONE=America/New_York
|
|
AUTO_DISTILL=true
|
|
AUTO_DISTILL_SHORT=true
|
|
AUTO_DISTILL_MID=true
|
|
AUTO_DISTILL_LONG=false # manual review recommended before enabling
|
|
|
|
# Memory tier token budgets (soft caps)
|
|
MEMORY_BUDGET_SHORT=3000
|
|
MEMORY_BUDGET_MID=2000
|
|
MEMORY_BUDGET_LONG=2000
|