Reference

Configuration

Settings for running your own copy of BambooKit.

Values marked secret belong only in the API's server environment. Everything else is public and may be built into apps; never put a secret into an app or website setting. Use placeholders like the ones below; the full list is in the developer documentation.

API — environment

Variable	Secret	Purpose
`SUPABASE_URL`	No	Supabase project URL (verifies email sign-ins)
`SUPABASE_ANON_KEY`	No	Only for older projects that sign tokens with a shared secret
`FIREBASE_PROJECT_ID`	No	Accept Google (Firebase) sign-ins of this project
`POSTGRES_URL`	Yes	Database; required on hosts whose disk is wiped on restart
`DATABASE_PATH`	No	SQLite file for local use, default `./data/bambookit.db`
`CORS_ORIGINS`	No	Allowed browser origins, e.g. `https://bambookit-web.onrender.com,http://localhost:3000`
`PUBLIC_SHARE_BASE_URL`	No	Origin used in share links
`CLOUDFLARE_ACCOUNT_ID`, `R2_BUCKET_NAME`	No	Cloud storage location
`R2_ACCESS_KEY_ID`, `R2_SECRET_ACCESS_KEY`	Yes	Cloud storage credentials
`SESSION_SNAPSHOT_DAYS`	No	Days history copies are kept, default 7
`SUPABASE_SERVICE_ROLE_KEY`	Yes	Needed to delete email accounts
`FIREBASE_API_KEY`	No	Needed to delete Google accounts

Example

SUPABASE_URL=https://<your-project-ref>.supabase.co
POSTGRES_URL=postgresql://<user>:<password>@<host>:5432/postgres
R2_SECRET_ACCESS_KEY=<r2-secret>

Website — build time

Variable	Purpose
`NEXT_PUBLIC_API_URL`	API address, default `https://bambookit-api.onrender.com`
`NEXT_PUBLIC_SUPABASE_URL`, `NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY`	Email sign-in
`NEXT_PUBLIC_FIREBASE_API_KEY`, `NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN`, `NEXT_PUBLIC_FIREBASE_PROJECT_ID`	Google sign-in (all three, or the button is hidden)

Desktop — `packages/desktop/.env.bambookit`

Variable	Purpose
`BAMBOOKIT_API_URL`	API address; default `https://bambookit-api.onrender.com` (`http://localhost:8080` for development builds)
`BAMBOOKIT_SUPABASE_URL`, `BAMBOOKIT_SUPABASE_ANON_KEY`	Email sign-in
`BAMBOOKIT_FIREBASE_API_KEY`, `BAMBOOKIT_FIREBASE_PROJECT_ID`, `BAMBOOKIT_FIREBASE_AUTH_DOMAIN`	Google sign-in

Android — `local.properties`

Key	Purpose
`bambookit.supabaseUrl`, `bambookit.supabaseAnonKey`	Sign-in
`bambookit.apiUrl.release`	API for release builds, default the hosted API
`bambookit.apiUrl.debug`	API for debug builds, e.g. `http://127.0.0.1:8080` over USB

Release signing keys live outside the repository in ~/.gradle/gradle.properties.

Agent settings

Models, agents, MCP servers and permission rules are configured in Settings inside BambooKit Desktop and in the agent's configuration file.