grand/.env.example at main · x0152/grand · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
DATABASE_URL=postgres://postgres:postgres@localhost:5432/mantis?sslmode=disable
PORT=8080

MANTIS_BACKEND_PORT=27480
MANTIS_FRONTEND_PORT=27173

# API access token. On first start the backend creates a default user with this token
# if the users table is empty. Use it to sign in from the web UI.
AUTH_TOKEN=change-me-to-a-long-random-string
AUTH_USER_NAME=admin

# Login brute-force protection: at most N failed logins per IP per window.
AUTH_RATE_LIMIT_MAX=5
AUTH_RATE_LIMIT_WINDOW=15m

# Token used by the runtimectl sandbox to call back into the runtime API
# for self-service provisioning. Generate any non-trivial random string.
RUNTIME_API_TOKEN=change-me-to-a-long-random-string

# Setup wizard defaults. Empty fields stay editable in the wizard. Once the
# wizard saves a value, this env var only acts as a prefill again after a reset.
MANTIS_LLM_BASE_URL=https://api.openai.com/v1
MANTIS_LLM_API_KEY=sk-...
MANTIS_LLM_MODEL=gpt-4o-mini

# Telegram bot (optional)
MANTIS_TG_BOT_TOKEN=
MANTIS_TG_USER_IDS=

# Email (optional, wizard prefill + email sandbox)
MANTIS_EMAIL_ADDRESS=
MANTIS_EMAIL_SMTP_HOST=
MANTIS_EMAIL_SMTP_PORT=
MANTIS_EMAIL_SMTP_USER=
MANTIS_EMAIL_SMTP_PASS=
MANTIS_EMAIL_IMAP_HOST=
MANTIS_EMAIL_IMAP_PORT=
MANTIS_EMAIL_IMAP_USER=
MANTIS_EMAIL_IMAP_PASS=

# Cron delivery target (optional)
# Supported channels: telegram
CRON_DELIVERY_CHANNEL=

# Optional services
ASR_API_URL=
OCR_API_URL=
TTS_API_URL=

# Sandbox runtime capabilities. Comma-separated CAP_* names applied to every
# sandbox on top of per-template additions (e.g. browser keeps SYS_ADMIN).
# Use the literal "ALL" to run sandboxes in fully privileged mode.
# Default: NET_RAW,NET_ADMIN — enough for ping, traceroute, nmap raw sockets,
# tun/tap, ip route, etc., without unlocking the rest of the kernel surface.
RUNTIME_SANDBOX_CAPS=NET_RAW,NET_ADMIN

# Generation limits
# Supervisor = main Mantis agent that orchestrates tools.
# Server     = sub-agent per SSH connection (one per remote server).
# Values support Go durations: "30s", "5m", "1h".
MANTIS_SUPERVISOR_MAX_ITERATIONS=30
MANTIS_SUPERVISOR_TIMEOUT=5m
MANTIS_SERVER_MAX_ITERATIONS=30
MANTIS_SERVER_TIMEOUT=5m
MANTIS_PLAN_STEP_TIMEOUT=10m