Configuration

All services load configuration from environment variables. Keep real values in deployment secrets, not repository files.

Go API essentials

Variable	Role
`HTTP_ADDR`	Go listen address, normally `:8080`
`DATABASE_URL`	Existing Kibegi PostgreSQL schema
`SECRET_KEY`	JWT signing and validation secret
`REDIS_URL`	Cache, locks, rate limits, revocation
`MINIO_*`	S3-compatible endpoint, bucket, credentials
`KIBEGI_CORS_ORIGIN`	Browser origin allowlist
`AI_INDEXER_URL`, `AI_INDEXER_TOKEN`	Private post-upload indexing callback

Support service essentials

The indexer needs DATABASE_URL, REDIS_URL, MinIO fields, SERVICE_TOKEN, and optional embedding-provider values. The FastMCP gateway needs GO_API_BASE_URL, optional GO_API_SERVICE_TOKEN, request timeout, MCP path, and allowed origins.

Read Security before setting production secrets and Operations before changing runtime values.