| # OSW Studio Local Development Environment |
| # Copy this file to .env and update with your values |
|
|
| # ============================================================================ |
| # Server Mode (SQLite + Publishing) |
| # ============================================================================ |
| # Enable Server mode for SQLite persistence and static site publishing |
| NEXT_PUBLIC_SERVER_MODE=false |
|
|
| # Session secret (generate with: openssl rand -base64 32) |
| SESSION_SECRET=your_session_secret_here |
|
|
| # Admin password — BOOTSTRAP ONLY |
| # Used for initial setup when no user accounts exist. |
| # Once the first user account is created, this is ignored. |
| # For new installs, you can skip this — the first visitor to /admin |
| # will be prompted to create the admin account via the registration page. |
| ADMIN_PASSWORD=your_secure_password_here |
|
|
| # Secure cookies (default: true in production) |
| # Uncomment and set to "false" only when running without HTTPS (e.g., VPS before SSL) |
| # SECURE_COOKIES=false |
|
|
| # Analytics secret for token signing (generate with: openssl rand -base64 32) |
| # IMPORTANT: Use a strong random value in production to secure analytics tracking |
| ANALYTICS_SECRET=your_analytics_secret_here |
|
|
| # Secrets encryption key (generate with: openssl rand -base64 32) |
| # Must be a base64-encoded 32-byte key for AES-256 encryption |
| # Required to enable encrypted secrets storage for edge functions |
| SECRETS_ENCRYPTION_KEY=your_secrets_encryption_key_here |
|
|
| # ============================================================================ |
| # Multitenancy & Workspaces |
| # ============================================================================ |
| # Control whether public user registration is allowed (default: closed) |
| # Set to "open" to allow new users to self-register via /admin/register |
| # Note: registration is ALWAYS allowed when no users exist (initial setup) |
| # REGISTRATION_MODE=open |
| # NEXT_PUBLIC_REGISTRATION_MODE=open |
|
|
| # Machine-to-machine API key for automating admin operations (optional) |
| # When set, requests with header "x-instance-api-key: <key>" bypass session auth |
| # on admin endpoints. Generate with: openssl rand -base64 32 |
| # INSTANCE_API_KEY=your_instance_api_key_here |
|
|
| # Unique identifier for this instance (shown in admin dashboard, optional) |
| # INSTANCE_ID=my-production-instance |
|
|
| # ============================================================================ |
| # Usage |
| # ============================================================================ |
| # Browser Mode (IndexedDB) — Default: |
| # - Don't set NEXT_PUBLIC_SERVER_MODE or leave .env file absent |
| # - Run: npm run dev |
| # - Access at: http://localhost:3000 |
| # - All data stored in the browser |
| # |
| # Server Mode (SQLite + Workspaces + Publishing): |
| # 1. Copy this file to .env |
| # 2. Set NEXT_PUBLIC_SERVER_MODE=true |
| # 3. Generate and set SESSION_SECRET, ANALYTICS_SECRET, SECRETS_ENCRYPTION_KEY |
| # 4. Run: npm run dev |
| # 5. Visit http://localhost:3000/admin — create admin account on first visit |
| # 6. Workspaces, projects, and deployments are stored in data/ directory |
| # 7. Published sites served at http://localhost:3000/deployments/{id}/ |
| |
| # ============================================================================ |
| # Default Provider |
| # ============================================================================ |
| # Override the default AI provider (default: openrouter) |
| # NEXT_PUBLIC_DEFAULT_PROVIDER=openrouter |
| |
| # ============================================================================ |
| # Telemetry (Anonymous Usage Analytics) |
| # ============================================================================ |
| # Telemetry is enabled by default and can be toggled in Settings UI. |
| # Set to "false" to disable telemetry at the environment level. |
| # NEXT_PUBLIC_TELEMETRY_ENABLED=false |
| |
| # Analytics endpoint and auth token (defaults to https://stats.oswstudio.com/collect) |
| # NEXT_PUBLIC_ANALYTICS_ENDPOINT=https://stats.oswstudio.com/collect |
| # NEXT_PUBLIC_ANALYTICS_TOKEN=your_analytics_token_here |
| |
| # Enable debug logging of telemetry events in the browser console |
| # NEXT_PUBLIC_TELEMETRY_DEBUG=true |
| |
| # Enable debug logging for server-side generation (SSE events, task lifecycle) |
| # SERVER_GEN_DEBUG=true |
| |
| # ============================================================================ |
| # Gateway integration (optional — for managed multi-instance deployments) |
| # ============================================================================ |
| WEBHOOK_URL= # Webhook destination URL (e.g., https://oswstudio.com) |
| WEBHOOK_SECRET= # HMAC-SHA256 signing secret for webhooks |
| INSTANCE_ID= # Instance identifier sent in webhook headers |
| NEXT_PUBLIC_GATEWAY_URL= # Gateway URL for auth redirect and "Switch workspace" link |
| |
