oss-back2base/back2base-container/defaults/env.example at main · Back2Base/oss-back2base · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
# oss-back2base environment configuration
#
# This file is a TEMPLATE. The installer copies it to ~/.config/back2base/env
# on first install. Edit THAT file (not this one) to change your tokens.
#
# Path: ~/.config/back2base/env

# ── Authentication (set at least one) ─────────────────────────────────────────
# All auth env vars are read host-side under the BACK2BASE_ prefix only.
# docker-compose strips the prefix and forwards the value into the container
# as the canonical name Claude Code reads (CLAUDE_CODE_OAUTH_TOKEN,
# ANTHROPIC_API_KEY, ANTHROPIC_AUTH_TOKEN, ANTHROPIC_BASE_URL). Bare unprefixed
# values in your shell or this file are intentionally NOT picked up.
#
# Option 1: Setup token (uses your Claude subscription)
#   In a host shell, run `claude setup-token`, copy the resulting token, and
#   paste it below as BACK2BASE_CLAUDE_CODE_OAUTH_TOKEN.
BACK2BASE_CLAUDE_CODE_OAUTH_TOKEN=

# Option 2: Anthropic API key (pay-as-you-go — incurs API charges)
# BACK2BASE_ANTHROPIC_API_KEY=

# Option 3: Custom Anthropic-compatible endpoint (e.g. self-hosted proxy)
# BACK2BASE_ANTHROPIC_BASE_URL=

# ── Repository ────────────────────────────────────────────────────────────────
# The CLI automatically mounts your working directory as /workspace.
# Override here only if you always want a fixed repo mounted.
# REPO_PATH=/path/to/your/repo

# ── Optional: Direct Cloudflare AI Gateway ───────────────────────────────────
# Route through Cloudflare's AI Gateway for usage tracking / caching.
# Get your gateway URL from: https://dash.cloudflare.com > AI > AI Gateway
CF_AIG_TOKEN=

# ── Optional: Custom API Header ──────────────────────────────────────────────
# Appended to every API request. Useful for WAF security rules
# that check for a secret header to allow traffic.
# Format: header-name: value
CUSTOM_API_HEADER=

# ── Optional: Terraform Cloud ─────────────────────────────────────────────────
TFC_TOKEN=

# ── Optional: AWS ─────────────────────────────────────────────────────────────
AWS_PROFILE=default
AWS_REGION=us-east-1

# ── Optional: Datadog ───────────────────────────────────────────────────────
DD_API_KEY=
DD_APPLICATION_KEY=

# ── Optional: GitHub ────────────────────────────────────────────────────────
GITHUB_TOKEN=

# ── Optional: Context7 ──────────────────────────────────────────────────────
CONTEXT7_API_KEY=

# ── Optional: Brave Search ──────────────────────────────────────────────────
BRAVE_API_KEY=

# ── Optional: Buildkite ───────────────────────────────────────────────────────
# BUILDKITE_API_TOKEN=bkua_...

# ── Optional: Timezone ────────────────────────────────────────────────────────
TZ=America/New_York

# ── Optional: Base Image ─────────────────────────────────────────────────────
# Pre-built base image with toolchains and MCP servers.
# BACK2BASE_BASE_IMAGE=ramseymcgrath/back2base-base:latest

# ── Optional: Model override ─────────────────────────────────────────────────
# Force a specific Claude model. Unset = profile default.
# BACK2BASE_MODEL=claude-opus-4-8[1m]

# ── Optional: Firewall ────────────────────────────────────────────────────────
# Set to 1 to disable outbound network filtering (allow all traffic).
# DISABLE_FIREWALL=0

# ── Local plans + memories ────────────────────────────────────────────────────
# Point this at a host directory to persist plans and memories outside the
# opaque back2base state dir. The CLI creates `plans/` and `memories/`
# subfolders inside it and bind-mounts them at ~/.back2base/plans and
# ~/.back2base/memories in the container. The memory tool reads and writes the
# mounted memories dir directly, so memories persist across sessions. Leave
# unset for the default (memories live under the back2base state dir, cleared
# each session start).
# BACK2BASE_DATA_DIR=~/back2base-data

# ── Optional: Managed Claude Code policy (enterprise) ────────────────────────
# Claude Code reads enterprise-deployed policy from a platform-specific
# host path (macOS: /Library/Application Support/ClaudeCode/, Linux:
# /etc/claude-code/). When those files exist, oss-back2base detects them
# and bind-mounts managed-settings.json, managed-settings.d/, and CLAUDE.md
# read-only into /etc/claude-code/ inside the container so Claude obeys the
# policy. Override the host probe path here for testing or non-standard
# installs (the contents of this dir get mounted into /etc/claude-code/).
# BACK2BASE_MANAGED_SETTINGS_DIR=/Library/Application Support/ClaudeCode