Environment Variables
All configuration options for Neptune
Neptune is configured via environment variables and CLI flags. CLI flags take precedence.
| Variable | Description |
|---|
ANTHROPIC_API_KEY | Anthropic API key for AI analysis, decompilation, and chat |
OPENAI_API_KEY | OpenAI API key for Neptune chat (alternative to Anthropic) |
NEPTUNE_CHAT_PROVIDER | Chat provider: anthropic or openai (auto-detects if unset) |
NEPTUNE_CHAT_MODEL | Chat model override (default: Claude Sonnet 4 or gpt-5.5) |
OPENAI_BASE_URL | OpenAI-compatible API base URL (optional) |
ANTHROPIC_BASE_URL | Anthropic API base URL (optional) |
| Variable | Default | Description |
|---|
NEPTUNE_PORT | 9090 | Server bind port |
NEPTUNE_DATA_DIR | ./neptune-data | Server data directory for uploads and results |
NEPTUNE_CORS_ORIGINS | localhost:9090 | Comma-separated allowed CORS origins |
NEPTUNE_RATE_LIMIT_RPM | 60 | Requests per minute per IP |
NEPTUNE_TRUST_PROXY | false | Trust X-Forwarded-For header (set true behind reverse proxy) |
NEPTUNE_DEV | | Set to 1 to enable dev-only endpoints (e.g., /decompile) |
| Variable | Description |
|---|
NEPTUNE_API_KEY | Server API key (legacy, admin role) |
NEPTUNE_ADMIN_KEY | Admin API key (full access) |
NEPTUNE_ANALYST_KEY | Analyst API key (read + analyze) |
NEPTUNE_VIEWER_KEY | Viewer API key (read-only) |
| Variable | Description |
|---|
BUCKET_ENDPOINT | S3-compatible endpoint (Railway auto-injects) |
BUCKET_NAME | S3 bucket name |
BUCKET_REGION | Bucket region (default: auto) |
AWS_ACCESS_KEY_ID | S3 access key |
AWS_SECRET_ACCESS_KEY | S3 secret key |
| Variable | Default | Description |
|---|
NEPTUNE_SIG_DB | ./neptune-signatures.db | Path to signature database file |
NEPTUNE_SIG_REMOTE_URL | https://signatures.neptune.rip | Remote signature server URL |
| Variable | Description |
|---|
NVD_API_KEY | NVD API key for higher rate limits |
| Variable | Default | Description |
|---|
NEPTUNE_API_URL | http://localhost:9090 | Backend API URL for Next.js rewrite |
NEPTUNE_ADMIN_KEY | | Backend admin key used to provision per-user API keys on login |
NEXT_PUBLIC_APP_URL | http://localhost:3000 | Public URL of the frontend (https://neptune.rip in production) |
BETTER_AUTH_URL | http://localhost:3000 | Public Better Auth URL |
BETTER_AUTH_SECRET | | Better Auth session secret |
BETTER_AUTH_TRUSTED_ORIGINS | | Additional trusted origins for Better Auth |
AUTH_DATABASE_URL | | Postgres connection string for web auth and app data |
GITHUB_CLIENT_ID | | GitHub OAuth client ID |
GITHUB_CLIENT_SECRET | | GitHub OAuth client secret |
NEXT_PUBLIC_GITHUB_APP_SLUG | opencode-agent | GitHub App slug for agent integration |
AUTUMN_SECRET_KEY | | Autumn billing/subscription secret key |
INVESTOR_PASSWORD | | Plain-text investor deck password |
INVESTOR_PASSWORD_HASH | | PBKDF2 investor deck password hash |
| Variable | Description |
|---|
AGENTCOMPUTER_API_KEY | AgentComputer API key for --sandbox remote execution |
| Variable | Default | Description |
|---|
RUST_LOG | neptune=info | Rust log filter (e.g., neptune=debug) |