.env.example

# Copy this file to .env before running Docker Compose.
#
# Generate a stable master key:
#   openssl rand -base64 32
#
# Keep this value safe. Losing it makes encrypted provider credentials
# unrecoverable after a data-volume reset.
KEIROUTER_MASTER_KEY=

# Host port exposed by Docker Compose.
KEIROUTER_PORT=20180

# Set to true only for local-only containers. VPS/Coolify usually needs false
# because reverse proxies connect from outside the container loopback interface.
KEIROUTER_BIND_LOOPBACK_ONLY=false

# json is recommended for containers; text is nicer for local terminals.
KEIROUTER_LOG_FORMAT=json

# Only needed when using deploy/compose.postgres.yaml.
POSTGRES_PASSWORD=

# Set true to add local/LAN OpenAI-compatible endpoints such as vLLM,
# Ollama, LM Studio, or another host on 172.16/12, 192.168/16, or 10/8.
KEIROUTER_SECURITY__ALLOW_PRIVATE_BASE_URL=false

# Controls whether KeiRouter trusts X-Forwarded-Proto / Forwarded headers when
# deciding the Secure flag on the dashboard session cookie. Default (true) is
# correct behind a TLS-terminating reverse proxy (nginx/Caddy/Traefik),
# Tailscale Funnel, or Cloudflare Tunnel. Set false to ignore forwarded headers
# and base the flag only on direct TLS connections (see issue #56).
KEIROUTER_TRUST_FORWARDED_HEADERS=true