mirror of
https://github.com/BaaRai/ARTEX.git
synced 2026-11-13 11:40:53 +08:00
BaaRai
8c3bae41f6
ARTEX_UNTRUSTED_BOUNDARY unset or empty now enables the boundary. 0, false, off and no (case-insensitive, trimmed) disable it; any other value keeps it on. Docs state the default, the opt-out and the measured cost (about 154 bytes per tool result plus one system note).
31 lines
1.3 KiB
Bash
31 lines
1.3 KiB
Bash
# Docker deployment configuration (copy to .env)
|
|
# The image is built locally by `docker compose build`; there is no registry tag.
|
|
# Address the web UI is published on. 127.0.0.1 keeps it host-local; set 0.0.0.0
|
|
# to reach it from another machine or from Windows when ARTEX runs inside WSL.
|
|
ARTEX_BIND_ADDR=127.0.0.1
|
|
# Reverse proxies (comma-separated CIDRs) whose X-Forwarded-For the login rate
|
|
# limit trusts. Empty: the header is ignored. See "Reverse proxy deployment" in README.md.
|
|
ARTEX_TRUSTED_PROXIES=
|
|
POSTGRES_USER=artex
|
|
POSTGRES_PASSWORD=change-me-please
|
|
POSTGRES_DB=artex
|
|
|
|
# LLM (fill one or both; you can also leave empty and configure in the UI)
|
|
ANTHROPIC_API_KEY=
|
|
OPENAI_API_KEY=
|
|
ARTEX_LLM_PROVIDER=
|
|
ARTEX_LLM_MODEL=
|
|
ARTEX_LLM_BASE_URL=
|
|
ARTEX_LLM_PROXY=
|
|
|
|
# Untrusted-output boundary. Frames every tool output between nonce-tagged markers so
|
|
# the model treats it as data, not instructions. On by default (unset or empty = on);
|
|
# set ARTEX_UNTRUSTED_BOUNDARY=0 (or false/off/no) to disable it. Measured cost: about
|
|
# 154 bytes per tool result plus one system note.
|
|
# ARTEX_UNTRUSTED_BOUNDARY=0
|
|
|
|
# Update banner (optional). ARTEX_UPDATE_CHECK=1 lets the backend check the public GitHub
|
|
# releases API for a newer ARTEX release at most once per 24 h and show a dismissible banner.
|
|
# Off by default: unset, no update request is made.
|
|
# ARTEX_UPDATE_CHECK=1
|