Upload .env

.env

@@ -7,7 +7,7 @@
 #node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
 # Secret key for JWT token signing (CHANGE THIS IN PRODUCTION!)
 # Generate a secure key with: openssl rand -hex 32
-
+SECRET_KEY=your-secret-key-here
 
 # =============================================================================
 # SERVER SETTINGS
@@ -23,6 +23,7 @@ PORT=7860
 API_BASE_ENDPOINT=/api
 
 # External frontend URL (used when backend runs without bundled frontend files)
+FRONTEND_URL=https://gakrchat1.netlify.app
 
 # Serve bundled frontend files from backend (set false for HF Spaces backend-only deploy)
 SERVE_FRONTEND=false
@@ -31,36 +32,38 @@ SERVE_FRONTEND=false
 DEBUG=false
 
 # =============================================================================
-# MODEL SETTINGS
+# MODEL SETTINGS - NVIDIA API
 # =============================================================================
 
-# Number of CPU threads to use for inference
-# Set to your CPU core count for optimal performance
-N_THREADS=4
+# NVIDIA API Key (get from https://build.nvidia.com/)
+NVIDIA_API_KEY=your-nvidia-api-key-here
+
+# NVIDIA API Base URL
+NVIDIA_BASE_URL=https://integrate.api.nvidia.com/v1
+
+# NVIDIA Model to use
+NVIDIA_MODEL=moonshotai/kimi-k2-instruct
 
-# Preload model on server startup (recommended)
-PRELOAD_MODEL=true
+# Context window size (tokens)
+N_CTX=128000
 
 # Default temperature (0.0 - 2.0)
 # Lower = more focused, Higher = more creative
-TEMPERATURE=0.7
+TEMPERATURE=0.6
 
 # Default maximum tokens per response
-MAX_TOKENS=128000
+MAX_TOKENS=4096
 
 # Top-p sampling (0.0 - 1.0)
 TOP_P=0.9
 
-# Top-k sampling (1 - 100)
-TOP_K=40
-
 # =============================================================================
 # CORS SETTINGS (for development)
 # =============================================================================
 
 # Allowed origins for CORS (comma-separated)
 # Use "*" for development, specific origins for production
-CORS_ORIGINS=["*"]
+CORS_ORIGINS=["https://gakrchat1.netlify.app"]
 
 # Allow credentials in CORS responses (set true only if using cookie auth)
 CORS_ALLOW_CREDENTIALS=false