Spaces:
Running
Running
| GROQ_API_KEY=your_groq_api_key_here | |
| GROQ_MODEL=llama3-8b-8192 | |
| GROQ_BASE_URL=https://api.groq.com/openai/v1 | |
| CHROMA_PERSIST_DIRECTORY=./chroma_db | |
| CHROMA_COLLECTION_NAME=negoptim_knowledge | |
| EMBEDDING_MODEL=intfloat/multilingual-e5-small | |
| RETRIEVAL_TOP_K=5 | |
| CHUNK_SIZE=700 | |
| CHUNK_OVERLAP=100 | |
| MAX_HISTORY_TURNS=10 | |
| KNOWLEDGE_BASE_PATH=../knowledge | |
| # ── Admin panel ─────────────────────────────────────────────────────────────── | |
| # Required to call all /api/admin/* endpoints (upload, list, delete). | |
| # Empty = all admin endpoints return 403. Generate: openssl rand -hex 32 | |
| ADMIN_TOKEN= | |
| # Add the admin panel's Vercel URL here so the browser can reach the backend. | |
| # Example: CORS_ORIGINS=http://localhost:3000,https://negoptim-admin.vercel.app | |
| CORS_ORIGINS=http://localhost:3000,http://127.0.0.1:3000 | |
| # ── Abuse protection / cost control ────────────────────────────────────────── | |
| # Shared secret gating POST /chat (must match the frontend proxy's value). | |
| # Empty = disabled (local dev). Generate with: openssl rand -hex 32 | |
| INTERNAL_AUTH_TOKEN= | |
| RATE_LIMIT_CHAT_PER_MINUTE=20 | |
| CHAT_PER_IP_PER_DAY=60 | |
| CHAT_GLOBAL_PER_DAY=800 | |
| MAX_INPUT_CHARS=1500 | |
| MAX_OUTPUT_TOKENS=600 | |
| # ── ROI Snapshot analysis feature ──────────────────────────────────────────── | |
| ANALYSIS_ENABLED=true | |
| ANALYSIS_PER_IP_PER_DAY=2 | |
| ANALYSIS_GLOBAL_PER_DAY=100 | |
| ANALYSIS_MAX_OUTPUT_TOKENS=450 | |
| BENCHMARK_DATA_TTL_HOURS=24 | |
| # ── Email ───────────────────────────────────────────────────────────────────── | |
| # Delivery priority: Resend HTTP API → SMTP → simulation (all empty = logs only). | |
| # Resend is the only path that works on the HF free tier (SMTP ports blocked). | |
| RESEND_API_KEY= | |
| # Sales inbox: where demo requests are addressed. REQUIRED for real delivery. | |
| # With the Resend sandbox sender (onboarding@resend.dev), only the Resend | |
| # account owner's address is deliverable until a domain is verified. | |
| SALES_EMAIL=you@example.com | |
| # General email mode may only target these domains (comma-separated) — | |
| # open-relay protection for the public demo. | |
| EMAIL_RECIPIENT_ALLOWLIST=usersloveit.com | |
| # Force-route ALL outgoing mail to a test inbox. Empty = real recipients. | |
| EMAIL_OVERRIDE_TO= | |
| # SMTP fallback (local dev only) | |
| SMTP_USER= | |
| SMTP_PASSWORD= | |