Environment Variables
All variables are read from.env in the repo root. The pnpm local and pnpm self-host scripts auto-generate a .env from .env.example if one doesn’t exist, filling in secrets automatically.
Core
Required for any setup path.| Variable | Required | Default | Description |
|---|---|---|---|
DATABASE_URL | Yes | postgresql://postgres:postgres@localhost:5432/oneglanse | Postgres connection string |
CLICKHOUSE_URL | Yes | http://localhost:8123 | ClickHouse HTTP endpoint |
REDIS_HOST | Yes | redis | Redis hostname (localhost for local mode) |
REDIS_PORT | Yes | 6379 | Redis port |
REDIS_PASSWORD | No | — | Redis auth password |
BETTER_AUTH_SECRET | Yes | auto-generated | Session signing secret — auto-generated by setup scripts |
INTERNAL_CRON_SECRET | Yes | auto-generated | Internal cron auth token — auto-generated by setup scripts |
ONEGLANSE_APP_MODE | No | local | cloud, local, or self-host — overridden automatically by scripts |
APP_URL | No | http://localhost:3000 | Public-facing URL of the web app |
API_BASE_URL | No | http://localhost:3000 | API base URL (used by tRPC client) |
LLM / Response Analysis
At least one LLM key is required to run response analysis after prompt collection.| Variable | Required | Default | Description |
|---|---|---|---|
OPENAI_API_KEY | Yes (if using OpenAI) | — | OpenAI API key for response analysis |
ANTHROPIC_API_KEY | Yes (if using Claude) | — | Anthropic API key for response analysis |
ANALYSIS_LLM_PROVIDER | No | openai | Which LLM to use: openai or claude |
Google OAuth
Required if you want users to sign in to the OneGlanse web app with Google.| Variable | Required | Default | Description |
|---|---|---|---|
GOOGLE_CLIENT_ID | No | — | Google OAuth client ID |
GOOGLE_CLIENT_SECRET | No | — | Google OAuth client secret |
/providers.
VPS Auth Upload
Used when transferring local provider sessions to a self-hosted VPS.| Variable | Required | Default | Description |
|---|---|---|---|
ONEGLANSE_VPS_IP | No | — | VPS IP — enables pnpm upload:vps shorthand |
AGENT_AUTH_UPLOAD_TOKEN | No | — | Bearer token to authenticate the auth upload API |
Proxy
Required on VPS deployments where direct connections to AI providers are blocked.| Variable | Required | Default | Description |
|---|---|---|---|
THORDATA_PROXY_API_URL | No | — | ThorData rotating proxy API endpoint |
PROXY_SCHEME | No | http | Proxy protocol used for ThorData proxy URLs |
Agent / Runtime Overrides
Override the browser runtime defaults. Only needed if the pinned defaults aren’t working for your environment.| Variable | Required | Default | Description |
|---|---|---|---|
DEBUG_ENABLED | No | — | Set to true to enable verbose agent logging |
CAMOUFOX_HEADLESS_MODE | No | virtual | Browser display mode: virtual, headful, or headless |
CAMOUFOX_PYTHON_BIN | No | — | Path to the Python 3 binary (e.g. /usr/bin/python3) |
CAMOUFOX_PIP_SPEC | No | cloverlabs-camoufox==0.5.5 | Camoufox pip package to install |
CAMOUFOX_BROWSER_CHANNEL | No | official/stable/135.0.1-beta.24 | Browser channel to use |
Self-Host Storage & Docker Images
| Variable | Required | Default | Description |
|---|---|---|---|
ONEGLANSE_STORAGE_ROOT | No | /opt/oneglanse/storage | Host path for persistent auth sessions and browser profiles |
ONEGLANSE_WEB_IMAGE | No | GHCR published image | Override the web app Docker image |
ONEGLANSE_AGENT_IMAGE | No | GHCR published image | Override the agent Docker image |
ONEGLANSE_POSTGRES_IMAGE | No | GHCR published image | Override the Postgres Docker image |
ONEGLANSE_LANDING_IMAGE | No | GHCR published image | Override the landing page Docker image |
Database Services (Self-Host / Docker Compose)
These configure the Postgres and ClickHouse containers. Used bydocker-compose.yml.
| Variable | Required | Default | Description |
|---|---|---|---|
POSTGRES_USER | Yes (self-host) | postgres | Postgres user |
POSTGRES_PASSWORD | Yes (self-host) | postgres | Postgres password |
POSTGRES_DB | Yes (self-host) | oneglanse | Postgres database name |
CLICKHOUSE_DB | Yes (self-host) | oneglanse | ClickHouse database name |
CLICKHOUSE_USER | Yes (self-host) | default | ClickHouse user |
CLICKHOUSE_PASSWORD | Yes (self-host) | clickhouse | ClickHouse password |