# vault-cortex — local quickstart
# Copy to .env and fill in values, then: docker compose up

# Required ──────────────────────────────────────────────────

# Bearer token for MCP authentication.
# Generate one: openssl rand -hex 32
MCP_AUTH_TOKEN=

# Absolute path to your Obsidian vault on this machine.
# Example: /Users/you/Documents/MyVault
VAULT_PATH=

# Optional ──────────────────────────────────────────────────

# Your IANA timezone — affects daily note resolution and memory timestamps.
# TZ=America/New_York

# Enable or disable the embedding pipeline (default: true).
# When true, notes are chunked and embedded via a local ONNX model
# (bge-small-en-v1.5) for hybrid search — FTS5 keyword + vector semantic
# similarity fused via RRF. First startup is slow (~5min for 700 notes);
# subsequent starts are fast via content-hash caching.
# Set to false to disable model download and use FTS5 search only.
# EMBEDDING_ENABLED=true

# Reranking mode for hybrid search results (default: blended).
# "blended" uses a cross-encoder to refine result ordering with
# position-aware score blending (~200ms added latency).
# "none" skips reranking for lower latency.
# Only takes effect when EMBEDDING_ENABLED=true.
# RERANK_MODE=blended

# Enable or disable the memory layer (default: true).
# Set to false to hide memory tools and skip About Me/ creation.
# MEMORY_ENABLED=true
# Memory folder name in your vault (default: About Me).
# MEMORY_DIR=About Me

# Host port to expose (default: 8000).
# PORT=8000

# Log verbosity: debug | info | warn | error (default: info).
# LOG_LEVEL=info

# Directory for persistent log files inside the container.
# Unset by default — logs go to stdout only. Set a path to also write
# date-stamped log files there (the /data volume persists them).
# LOG_DIR=/data/logs

# Days to retain persistent log files before cleanup (default: 30).
# LOG_RETENTION_DAYS=30

# Windows users: set this to true. Makes a vault stored on a C: drive work
# through Docker Desktop (switches the file watcher to polling and note moves
# to rename-based writes). Only strictly needed when your vault is on a C:
# drive rather than inside WSL2, but harmless to enable for any Windows setup.
# WINDOWS_MODE=true