mirror of
https://github.com/simstudioai/sim.git
synced 2026-10-25 09:34:44 +08:00
Theodore LiandClaude Opus 5
c5cc6ce26c
* feat(chat): hide the Chat module when CHAT_ENABLED is unset A self-hosted deployment that skipped the chat key still rendered the full mothership Chat UI, landing on the composer and 401ing on every message. Gate it behind a CHAT_ENABLED / NEXT_PUBLIC_CHAT_ENABLED twin, written by the setup wizard alongside COPILOT_API_KEY and validated by the existing FLAG_TWINS doctor check. The flag resolves at module scope on both render passes, so no chat surface renders then disappears. With Chat off the workspace lands on its first workflow (resolved server-side, behind the cached host-context check so no workflow id leaks to non-members), and the chats list, scheduled tasks, editor Chat panel, and chat CTAs are absent. Routes are gated rather than deleted: /home redirects because it is baked into delivered invitation emails and the accept contract. Also fixes two bugs the gate exposed: a persisted activeTab of 'copilot' left the workflow panel blank from first paint, and the panel's handoff listener claimed MOTHERSHIP_SEND_MESSAGE events outside its own gate, silently swallowing "Fix in Chat" messages. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012ErcRgvi7VQBeKDQ3MBMha * refactor(chat): gate the UI on NEXT_PUBLIC_CHAT_DISABLED, not an opt-in flag CHAT_ENABLED made Chat opt-in, so every existing deployment that already had COPILOT_API_KEY would have lost the module until it set a new variable. Invert to an opt-out so nothing changes for them. That also collapses the twin. The only reason the flag needed a server/client pair was that it projected a secret; NEXT_PUBLIC_CHAT_DISABLED is not one, so getEnv resolves the same value from process.env on the server and window.__ENV in the browser. Gone with it: the FLAG_TWINS entry and its doctor sync check, the two-variable wizard write, and the boot-time throw, whose contradiction (flag on, key absent) can no longer be expressed. Presentation and capability are now separate concerns. NEXT_PUBLIC_CHAT_DISABLED decides whether the surfaces render; COPILOT_API_KEY decides whether the work can run, and gates the paths that need it — the Sim Chat block, prompt-job claims, and inbox access — each failing on its own terms. The wizard writes the opt-out when you skip the chat key, which is the case this started from: a fresh self-host that never configured Chat. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012ErcRgvi7VQBeKDQ3MBMha * feat(setup): prompt for the chat key in k8s mode The dev and compose flows minted a chat key and wrote the Chat opt-out alongside it; k8s did neither, so a cluster install with no COPILOT_API_KEY in its Helm values rendered a Chat module that rejects every message. Prompt with the same flow and feed both values into `app.env`, which the chart already renders as arbitrary container env. Reading the previous release's key matters here in a way it does not for the file-based modes: `helm upgrade` without `--reuse-values` keeps only what this document carries, so a key the user elects to keep has to be re-supplied or it is silently dropped. Splits the release-values read from the secret-reuse check so both the key and the secrets come from one `helm get values` call, and carries the mothership override across for the same mint-here-validate-there reason the other modes document. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012ErcRgvi7VQBeKDQ3MBMha * fix(setup): write app-behavior flags to every env file the app can start from The wizard wrote the Chat opt-out only to the env file its own mode owns, so choosing compose put it in the root `.env` while `bun run dev` reads `apps/sim/.env` and never saw it. Skipping the chat key appeared to do nothing. Mirror values that change how the app behaves — as opposed to where it connects — across both targets. Connection settings deliberately do not go through this: DATABASE_URL and friends differ between the compose stack and a local dev run, which is why this takes an explicit set of values rather than the whole batch. The mirrored file is written even when absent, since missing is exactly the case that stranded the flag, but with seeding suppressed so a compose run leaves a one-line apps/sim/.env instead of a full .env.example for a stack the user is not running. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012ErcRgvi7VQBeKDQ3MBMha * fix(compose): forward NEXT_PUBLIC_CHAT_DISABLED to the app container The wizard wrote the flag into the root .env, but compose only passes through variables the service's `environment` block names — and that block listed COPILOT_API_KEY without its companion. Skipping the chat key on a Docker install therefore did nothing: the value sat in .env and never reached the container. Add the passthrough to all four compose files. Reverts the previous commit's mirroring into apps/sim/.env, which treated the symptom — each mode writes only the env file it owns, and that file is now wired correctly. k8s needs no equivalent: its values flow into `app.env`, which the chart renders key by key. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012ErcRgvi7VQBeKDQ3MBMha * fix(chat): resolve the landing route without blocking on the database Server-resolving the first workflow meant a session lookup, an access check and a query had to finish before anything rendered. A slow or unreachable database left the user on a blank page under a populated sidebar — worse than the instant redirect it replaced, and with no signal that anything was wrong. Redirect straight to `/w` instead and let it pick from the workflow list the layout already prefetches, so the choice costs no round trip and cannot hang. Repoints the sidebar's primary action rather than hiding it: the slot that offered "New chat" now offers "New workflow" and creates one, since with Chat off there is no composer to open but the intent is the same. Sends the CLI key handoff to signup rather than login. It is reached from a terminal — usually the setup wizard standing up a fresh self-host — where the visitor has no account yet. Both auth pages cross-link carrying the callback, so a returning user is one click from login with their destination intact. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012ErcRgvi7VQBeKDQ3MBMha * improvement(chat): address cleanup-pass findings on the Chat gate Effects: the panel's auto-select effect read the copilot chat list while the list query was deliberately skipped, took "empty" for "deleted in another tab", and cleared the user's selection — latching a ref that stopped it ever being restored. Guarded on the same condition as the handoff listener. Memo: `/w` filtered workflows through a useMemo whose array dependency was a fresh `[]` on every render while the query had no data — the exact window the page exists for — so it memoized nothing and re-fired the redirect effect. Keyed on the workflow id instead. Same unstable-default problem on the sidebar's chat list, where it invalidated five downstream memos; given a stable empty constant. Callback: `handleCreateWorkflow` listed the whole mutation object in its deps, which TanStack recreates every render. Harmless until this branch wired it into the top nav, where it defeated `memo(SidebarNavItem)`. React Query: Recently Deleted still fetched archived chats unconditionally and offered restores into routes that now 404. Also surfaces an error state on `/w` — it is the landing route now, so a failed list fetch would otherwise spin forever behind a log line — fixes a spinner using a token undefined in dark mode, and trims comments that restated code. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012ErcRgvi7VQBeKDQ3MBMha * fix(chat): gate workflow creation on write access, pin the key in schedule tests The zero-workflow landing offered "Create workflow" to every member. Creation navigates optimistically, so a read-only member was sent to a workflow the server had already refused to create, with the failure never surfaced. Gate both entry points — the empty state and the sidebar's "New workflow" row — on the same `canEdit` check the rest of the sidebar uses, and tell read-only members who can make one instead of offering an action that cannot succeed. The schedule-execution tests only passed locally because vitest loads the developer's own `.env`, which supplied COPILOT_API_KEY; CI has none, so the prompt-job claim guard skipped the claims those cases assert on. Pin the key through the env mock so the suite states its own preconditions. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012ErcRgvi7VQBeKDQ3MBMha * fix(setup): name both variables in the chat-key failure hint The caller writes the Chat opt-out whenever the prompt returns no key, so the hint's "or set COPILOT_API_KEY yourself" restored capability while leaving the module hidden — the one path where following setup's own advice does not work. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012ErcRgvi7VQBeKDQ3MBMha --------- Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
193 lines
14 KiB
Bash
193 lines
14 KiB
Bash
# Database (Required)
|
|
DATABASE_URL="postgresql://postgres:your_password@localhost:5432/simstudio"
|
|
# Optional read-replica connection string for offloading heavy read paths
|
|
# (logs listing, audit logs, dashboard aggregations). Reads fall back to
|
|
# DATABASE_URL when unset.
|
|
# DATABASE_REPLICA_URL=""
|
|
|
|
# Authentication (Required unless DISABLE_AUTH=true)
|
|
BETTER_AUTH_SECRET=your_secret_key # Use `openssl rand -hex 32` to generate, or visit https://www.better-auth.com/docs/installation
|
|
BETTER_AUTH_URL=http://localhost:3000
|
|
|
|
# Authentication Bypass (Optional - for self-hosted deployments behind private networks)
|
|
# DISABLE_AUTH=true # Uncomment to bypass authentication entirely. Creates an anonymous session for all requests.
|
|
|
|
# Private Database Hosts (Optional - for self-hosted deployments only)
|
|
# ALLOW_PRIVATE_DATABASE_HOSTS=true # Uncomment to let database/connector tools reach private/reserved/loopback hosts (e.g. Docker/K8s service names, localhost). Loosens the SSRF boundary; only enable on a trusted private network.
|
|
|
|
# NextJS (Required)
|
|
NEXT_PUBLIC_APP_URL=http://localhost:3000
|
|
# INTERNAL_API_BASE_URL=http://sim-app.default.svc.cluster.local:3000 # Optional: internal URL for server-side /api self-calls; defaults to NEXT_PUBLIC_APP_URL
|
|
# TRUSTED_ORIGINS=https://www.example.com,https://app.example.com # Optional: comma-separated additional public origins to trust for auth (apex+www, alias domains). Merged into Better Auth trustedOrigins.
|
|
# AUTH_TRUSTED_PROXIES=10.0.0.0/24,192.0.2.10 # Optional: reverse-proxy IPs/CIDRs in front of the app. Better Auth walks x-forwarded-for right to left, skips these hops, and uses the first untrusted address as the client IP (prevents forwarded-header spoofing). Use your proxies' actual addresses, not broad private ranges that also cover clients.
|
|
|
|
# Chat (Optional)
|
|
# COPILOT_API_KEY= # Mint one at https://sim.ai. Without it the Sim Chat block, prompt jobs, and Inbox cannot run
|
|
# NEXT_PUBLIC_CHAT_DISABLED=true # Hides the Chat module: the workspace lands on your first workflow, and the chats list, scheduled tasks, and editor Chat panel are absent. Chat is shown when unset; `bun run setup` sets this for you if you skip the chat key
|
|
|
|
# Security (Required)
|
|
ENCRYPTION_KEY=your_encryption_key # Use `openssl rand -hex 32` to generate, used to encrypt environment variables
|
|
INTERNAL_API_SECRET=your_internal_api_secret # Use `openssl rand -hex 32` to generate, used to encrypt internal api routes
|
|
API_ENCRYPTION_KEY=your_api_encryption_key # Use `openssl rand -hex 32` to generate, used to encrypt api keys
|
|
|
|
# Email Provider (Optional)
|
|
# Configure ONE provider — the mailer auto-detects in priority order:
|
|
# Resend → AWS SES → SMTP → Azure Communication Services → Gmail. If none
|
|
# are configured, emails are logged to console instead.
|
|
#
|
|
# Resend
|
|
# RESEND_API_KEY= # API key from https://resend.com
|
|
#
|
|
# AWS SES (credentials resolved via the standard AWS provider chain:
|
|
# env vars, shared config, ECS/EKS task role, EC2 instance profile, SSO)
|
|
# AWS_SES_REGION=us-east-1
|
|
#
|
|
# SMTP (works with MailHog locally: host=localhost port=1025, no auth)
|
|
# SMTP_HOST=smtp.example.com
|
|
# SMTP_PORT=587 # 465 = implicit TLS, 587 = STARTTLS, 25 = plain
|
|
# SMTP_USER= # Optional — omit for unauthenticated relays
|
|
# SMTP_PASS= # Optional — omit for unauthenticated relays
|
|
# SMTP_SECURE= # Set "true" to force TLS on connect; auto-true on port 465
|
|
#
|
|
# Azure Communication Services
|
|
# AZURE_ACS_CONNECTION_STRING=
|
|
#
|
|
# Gmail API (Google-native — service account with domain-wide delegation for
|
|
# the gmail.send scope; the Google Workspace SMTP relay also works via SMTP_HOST)
|
|
# GMAIL_CREDENTIALS_JSON= # Inline service-account JSON with domain-wide delegation
|
|
# GMAIL_SENDER=noreply@yourdomain.com # Workspace user the service account impersonates
|
|
#
|
|
# Shared sender configuration
|
|
# FROM_EMAIL_ADDRESS="Sim <noreply@example.com>"
|
|
# EMAIL_DOMAIN=example.com # Fallback when FROM_EMAIL_ADDRESS is unset
|
|
|
|
# Local AI Models (Optional)
|
|
# OLLAMA_URL=http://localhost:11434 # URL for local Ollama server - uncomment if using local models
|
|
# VLLM_BASE_URL=http://localhost:8000 # Base URL for your self-hosted vLLM (OpenAI-compatible)
|
|
# VLLM_API_KEY= # Optional bearer token if your vLLM instance requires auth
|
|
# LITELLM_BASE_URL=http://localhost:4000 # Base URL for your LiteLLM proxy (OpenAI-compatible)
|
|
# LITELLM_API_KEY= # Optional bearer token if your LiteLLM proxy requires auth
|
|
# NEXT_PUBLIC_FORCE_HOSTED=true # Dev only: treat this instance as hosted Sim (sim-auto pool, platform keys); ignored in production builds
|
|
# FIREWORKS_API_KEY= # Optional Fireworks AI API key for model listing and inference
|
|
# FIREWORKS_API_KEY_1= # Optional Fireworks API key for rotation (hosted deployments)
|
|
# FIREWORKS_API_KEY_2= # Additional Fireworks API key for load balancing
|
|
# FIREWORKS_API_KEY_3= # Additional Fireworks API key for load balancing
|
|
# NEXT_PUBLIC_BEDROCK_DEFAULT_CREDENTIALS=true # Set when using AWS default credential chain (IAM roles, ECS task roles, IRSA). Hides credential fields in Agent block UI.
|
|
# AZURE_OPENAI_ENDPOINT= # Azure OpenAI endpoint (hides field in UI when set alongside NEXT_PUBLIC_AZURE_CONFIGURED)
|
|
# AZURE_OPENAI_API_KEY= # Azure OpenAI API key
|
|
# AZURE_OPENAI_API_VERSION= # Azure OpenAI API version
|
|
# AZURE_ANTHROPIC_ENDPOINT= # Azure Anthropic endpoint (AI Foundry)
|
|
# AZURE_ANTHROPIC_API_KEY= # Azure Anthropic API key
|
|
# AZURE_ANTHROPIC_API_VERSION= # Azure Anthropic API version (e.g., 2023-06-01)
|
|
# NEXT_PUBLIC_AZURE_CONFIGURED=true # Set when Azure credentials are pre-configured above. Hides endpoint/key/version fields in Agent block UI.
|
|
# COHERE_API_KEY= # Cohere API key for the Knowledge block reranker (rerank-v4.0-pro/-fast, rerank-v3.5). Alternatively set COHERE_API_KEY_1/2/3 for rotation.
|
|
# NEXT_PUBLIC_COHERE_CONFIGURED=true # Set when COHERE_API_KEY (or rotation keys) are pre-configured above. Hides the Cohere API Key field on the Knowledge block UI.
|
|
|
|
# Hosted tool API keys (Optional - lets Sim supply the key so users don't have to bring their own).
|
|
# Each provider reads `{PREFIX}_COUNT` then `{PREFIX}_1..N`, distributing requests round-robin across the keys.
|
|
# HUNTER_API_KEY_COUNT=2 # Number of Hunter.io keys for hosted Hunter blocks
|
|
# HUNTER_API_KEY_1= # Hunter.io API key #1
|
|
# HUNTER_API_KEY_2= # Hunter.io API key #2
|
|
# PEOPLEDATALABS_API_KEY_COUNT=2 # Number of People Data Labs keys for hosted PDL blocks
|
|
# PEOPLEDATALABS_API_KEY_1= # People Data Labs API key #1
|
|
# PEOPLEDATALABS_API_KEY_2= # People Data Labs API key #2
|
|
# CONTEXT_DEV_API_KEY_COUNT=2 # Number of Context.dev keys for hosted Context.dev blocks
|
|
# CONTEXT_DEV_API_KEY_1= # Context.dev API key #1
|
|
# CONTEXT_DEV_API_KEY_2= # Context.dev API key #2
|
|
|
|
# File Storage (Optional - defaults to local disk; use S3, Azure Blob, or Google Cloud Storage for production)
|
|
# AWS_REGION=us-east-1 # Required with S3_BUCKET_NAME to enable S3. Use "auto" for Cloudflare R2
|
|
# AWS_ACCESS_KEY_ID= # Omit to use the instance/IRSA credential chain
|
|
# AWS_SECRET_ACCESS_KEY= # Omit to use the instance/IRSA credential chain
|
|
# S3_BUCKET_NAME= # General workspace files bucket (required with AWS_REGION to enable S3)
|
|
# S3_KB_BUCKET_NAME= # Knowledge base documents
|
|
# S3_EXECUTION_FILES_BUCKET_NAME= # Workflow execution files
|
|
# S3_CHAT_BUCKET_NAME= # Deployed chat assets
|
|
# S3_COPILOT_BUCKET_NAME= # Copilot attachments
|
|
# S3_PROFILE_PICTURES_BUCKET_NAME= # User profile pictures
|
|
# S3_OG_IMAGES_BUCKET_NAME= # OpenGraph preview images (falls back to S3_BUCKET_NAME)
|
|
# S3_WORKSPACE_LOGOS_BUCKET_NAME= # Workspace logos (falls back to S3_BUCKET_NAME)
|
|
# S3_ENDPOINT= # Custom endpoint for S3-compatible storage (Cloudflare R2, MinIO, Backblaze B2). Leave unset for AWS S3
|
|
# S3_FORCE_PATH_STYLE=true # Required for MinIO/Ceph RGW. Leave unset for AWS S3 and R2
|
|
|
|
# Instagram OAuth (Optional - Instagram App ID/Secret from Meta App Dashboard > Instagram > API setup with Instagram login)
|
|
# INSTAGRAM_CLIENT_ID=
|
|
# INSTAGRAM_CLIENT_SECRET=
|
|
# Instagram publish file uploads require cloud storage above — S3, Azure Blob, or GCS (Meta must fetch a public HTTPS URL).
|
|
# Gmail attachments do not need this.
|
|
|
|
# TikTok OAuth (Optional - Client Key/Secret from the TikTok for Developers app)
|
|
# TIKTOK_CLIENT_ID=
|
|
# TIKTOK_CLIENT_SECRET=
|
|
|
|
# Azure Blob Storage takes precedence over S3 if both are configured
|
|
# AZURE_ACCOUNT_NAME= # Azure storage account name
|
|
# AZURE_ACCOUNT_KEY= # Azure storage account key
|
|
# AZURE_CONNECTION_STRING= # Alternative to account name/key
|
|
# AZURE_STORAGE_CONTAINER_NAME= # General workspace files container
|
|
# AZURE_STORAGE_KB_CONTAINER_NAME= # Knowledge base documents
|
|
# AZURE_STORAGE_EXECUTION_FILES_CONTAINER_NAME= # Workflow execution files
|
|
# AZURE_STORAGE_CHAT_CONTAINER_NAME= # Deployed chat assets
|
|
# AZURE_STORAGE_COPILOT_CONTAINER_NAME= # Copilot attachments
|
|
# AZURE_STORAGE_PROFILE_PICTURES_CONTAINER_NAME= # User profile pictures
|
|
# AZURE_STORAGE_OG_IMAGES_CONTAINER_NAME= # OpenGraph preview images (falls back to AZURE_STORAGE_CONTAINER_NAME)
|
|
# AZURE_STORAGE_WORKSPACE_LOGOS_CONTAINER_NAME= # Workspace logos (falls back to AZURE_STORAGE_CONTAINER_NAME)
|
|
|
|
# Google Cloud Storage (used when neither Azure Blob nor S3 is configured)
|
|
# GCS_PROJECT_ID= # GCP project ID (optional — inferred from credentials/ADC when unset)
|
|
# GCS_CREDENTIALS_JSON= # Inline service-account JSON. Omit to use Application Default Credentials (Workload Identity, GOOGLE_APPLICATION_CREDENTIALS)
|
|
# GCS_BUCKET_NAME= # General workspace files bucket (enables GCS; all other buckets fall back to it)
|
|
# GCS_KB_BUCKET_NAME= # Knowledge base documents
|
|
# GCS_EXECUTION_FILES_BUCKET_NAME= # Workflow execution files
|
|
# GCS_CHAT_BUCKET_NAME= # Deployed chat assets
|
|
# GCS_COPILOT_BUCKET_NAME= # Copilot attachments
|
|
# GCS_PROFILE_PICTURES_BUCKET_NAME= # User profile pictures
|
|
# GCS_OG_IMAGES_BUCKET_NAME= # OpenGraph preview images
|
|
# GCS_WORKSPACE_LOGOS_BUCKET_NAME= # Workspace logos
|
|
|
|
# Admin API (Optional - for self-hosted GitOps)
|
|
# ADMIN_API_KEY= # Use `openssl rand -hex 32` to generate. Enables admin API for workflow export/import.
|
|
# Usage: curl -H "x-admin-key: your_key" https://your-instance/api/v1/admin/workspaces
|
|
|
|
# Enterprise Features (Optional - self-hosted). One switch enables organizations, SSO,
|
|
# permission groups, audit logs, whitelabeling, session policies, data retention, data
|
|
# drains, forks, and the inbox. Set both — the server value grants access, the
|
|
# NEXT_PUBLIC_ value decides what the settings UI shows.
|
|
# Docs: https://docs.sim.ai/platform/enterprise/self-hosted
|
|
# ENTERPRISE_ENABLED=true
|
|
# NEXT_PUBLIC_ENTERPRISE_ENABLED=true
|
|
|
|
# Per-feature overrides. An explicitly set flag wins over ENTERPRISE_ENABLED, so use these
|
|
# to enable one feature on its own or to switch a single feature back off.
|
|
# ACCESS_CONTROL_ENABLED= / NEXT_PUBLIC_ACCESS_CONTROL_ENABLED= # Permission groups
|
|
# SSO_ENABLED= / NEXT_PUBLIC_SSO_ENABLED= # SAML and OIDC sign-in
|
|
# WHITELABELING_ENABLED= / NEXT_PUBLIC_WHITELABELING_ENABLED= # Custom branding
|
|
# AUDIT_LOGS_ENABLED= / NEXT_PUBLIC_AUDIT_LOGS_ENABLED= # Audit logging
|
|
# SESSION_POLICIES_ENABLED= / NEXT_PUBLIC_SESSION_POLICIES_ENABLED=
|
|
# DATA_RETENTION_ENABLED= / NEXT_PUBLIC_DATA_RETENTION_ENABLED= # Runs retention deletion — off by default
|
|
# DATA_DRAINS_ENABLED= / NEXT_PUBLIC_DATA_DRAINS_ENABLED= # Export streams
|
|
# FORKING_ENABLED= # Workspace forks
|
|
# ORGANIZATIONS_ENABLED= / NEXT_PUBLIC_ORGANIZATIONS_ENABLED= # Organizations only
|
|
|
|
# Instance organization (Optional). Most enterprise features read their settings from the
|
|
# organization that owns a workspace, so a deployment needs an organization for them to
|
|
# apply. Setting a name puts every user in one shared org at signup and makes their
|
|
# workspaces org-owned. Leave unset to manage organizations yourself via the Admin API.
|
|
# INSTANCE_ORG_NAME=Acme Inc
|
|
# INSTANCE_ORG_SLUG=acme-inc # Optional — derived from the name when unset
|
|
# INSTANCE_ORG_OWNER_EMAIL=admin@acme.com # Optional — defaults to the first user to sign up
|
|
|
|
# Limits (Optional - self-hosted). With billing disabled (BILLING_ENABLED unset), no plan
|
|
# limits are enforced. Explicitly setting a free-tier variable below opts that specific
|
|
# limit back in at the configured value.
|
|
# RATE_LIMIT_FREE_SYNC=50 # Sync executions per minute
|
|
# RATE_LIMIT_FREE_ASYNC=200 # Async executions per minute
|
|
# RATE_LIMIT_FREE_API_ENDPOINT=30 # v1 API endpoint requests per minute
|
|
# EXECUTION_TIMEOUT_FREE=300 # Sync execution timeout in seconds
|
|
# EXECUTION_TIMEOUT_ASYNC_FREE=5400 # Async execution timeout in seconds
|
|
# FREE_TABLES_LIMIT=5 # Max user tables per workspace
|
|
# FREE_TABLE_ROWS_LIMIT=50000 # Max rows per user table
|
|
# TABLE_DISPATCH_CONCURRENCY_FREE=20 # Rows one table run executes in parallel on free tier
|
|
# TABLE_DISPATCH_CONCURRENCY_PAID=50 # Rows one table run executes in parallel on paid tiers (billing disabled uses this)
|
|
# FREE_STORAGE_LIMIT_GB=5 # File storage quota in GB
|