# Turnstone environment variables # Copy to .env and adjust for your setup. All variables are optional unless noted. # --- Database & paths --- # TURNSTONE_DB=/data/turnstone.db # TURNSTONE_PATTERNS=/patterns # TURNSTONE_SOURCE_HOST=my-server # --- GPU / LLM inference --- # GPU_SERVER_URL — URL of your GPU inference server (Ollama, vLLM, or cf-orch coordinator). # Paid+ users: leave unset to auto-default to https://orch.circuitforge.tech via CF_LICENSE_KEY. # Local Ollama (default if unset): http://localhost:11434 # Local cf-orch coordinator: http://10.1.10.71:7700 # CF_ORCH_URL is also accepted as a backward-compatible alias. # GPU_SERVER_URL=http://localhost:11434 # --- CircuitForge license (Paid+) --- # Enables cloud GPU inference and premium features. # When set, GPU_SERVER_URL defaults to https://orch.circuitforge.tech automatically. # CF_LICENSE_KEY=CFG-TRSN-XXXX-XXXX-XXXX # --- Bundle endpoint (optional) --- # Remote endpoint to push diagnostic bundles for escalation. # TURNSTONE_BUNDLE_ENDPOINT=https://example.com/api/bundles # --- Periodic batch glean --- # Seconds between automatic glean runs from sources.yaml. Set to 0 to disable. # TURNSTONE_GLEAN_INTERVAL=900 # --- Multi-agent diagnose pipeline (experimental) --- # Enable the 5-stage ML pipeline instead of the single-LLM summarize() call. # TURNSTONE_MULTI_AGENT_DIAGNOSE=true # Stage 2 — ML severity classifier (optional; falls back to pattern_tags then regex). # Recommended: byviz/bylastic_classification_logs (~300MB, downloaded from HuggingFace) # TURNSTONE_CLASSIFIER_MODEL=byviz/bylastic_classification_logs # Stage 4 — Embedding backend for false-positive suppression. # sentence_transformers: in-process local model (downloads on first use) # ollama: uses a running Ollama instance (no download needed if model is already pulled) # TURNSTONE_EMBED_BACKEND=sentence_transformers # TURNSTONE_EMBED_MODEL=BAAI/bge-small-en-v1.5 # TURNSTONE_EMBED_DEVICE=cpu # --- Air-gapped / offline deployment --- # Set to 1 to block all HuggingFace hub network access at runtime. # Pre-download models to ~/.cache/huggingface/ before deploying — see docs/air-gapped-deployment.md. # TURNSTONE_OFFLINE_MODE=1 # --- API authentication --- # When set, all /api/ requests require: Authorization: Bearer # Generate a token: python -c "import secrets; print(secrets.token_urlsafe(32))" # TURNSTONE_API_KEY=your-secret-token-here