export ANTHROPIC_API_KEY="sk-ant-api03-..."
export OPENAI_API_KEY="sk-..."
export GOOGLE_API_KEY="AIza..."
export GROQ_API_KEY="gsk_..."
### Priority Order
API keys are resolved in this order:
1. Command line `--api-key` option
2. Environment-specific API key variable
3. Environment variables passed via `--env`
4. `.env` file in current directory
## GitHub Integration
### Authentication
| Variable | Description | Required For |
|----------|-------------|--------------|
| `GITHUB_TOKEN` | Personal access token | PR creation, Git operations |
| `GITHUB_REPOSITORY` | Repository in `owner/repo` format | PR creation |
Example:
```bash
export GITHUB_TOKEN="ghp_xxxxxxxxxxxxxxxxxxxx"
export GITHUB_REPOSITORY="myorg/myrepo"
### Token Permissions
Required GitHub token scopes:
- `repo` - Full repository access
- `write:pull_requests` - Create PRs
- `read:user` - Read user profile
## Provider Configuration
### Dagger (Local Provider)
| Variable | Description | Default |
|----------|-------------|---------|
| `VIBEKIT_PREFER_REGISTRY_IMAGES` | Use Docker Hub images instead of local builds | `false` |
| `DOCKER_USERNAME` | Docker Hub username for image uploads | None |
Example:
```bash
export VIBEKIT_PREFER_REGISTRY_IMAGES="true"
export DOCKER_USERNAME="myusername"
### Northflank
| Variable | Description | Default |
|----------|-------------|---------|
| `NORTHFLANK_PROJECT_ID` | Default project ID for Northflank | None |
| `NORTHFLANK_API_TOKEN` | Northflank API token | None |
### Daytona
| Variable | Description | Default |
|----------|-------------|---------|
| `DAYTONA_WORKSPACE_ID` | Default workspace ID | None |
| `DAYTONA_API_TOKEN` | Daytona API token | None |
### E2B
| Variable | Description | Default |
|----------|-------------|---------|
| `E2B_API_KEY` | E2B API key | None |
| `E2B_TEAM_ID` | E2B team identifier | None |
## Default Settings
### Resource Allocation
| Variable | Description | Default |
|----------|-------------|---------|
| `VIBEKIT_DEFAULT_CPU` | Default CPU cores for environments | 2 |
| `VIBEKIT_DEFAULT_MEMORY` | Default memory in MB | 2048 |
| `VIBEKIT_DEFAULT_DISK` | Default disk space in GB | 20 |
Example:
```bash
export VIBEKIT_DEFAULT_CPU="4"
export VIBEKIT_DEFAULT_MEMORY="4096"
export VIBEKIT_DEFAULT_DISK="50"
### Behavior Settings
| Variable | Description | Default |
|----------|-------------|---------|
| `VIBEKIT_DEFAULT_AGENT` | Default AI agent type | None |
| `VIBEKIT_DEFAULT_TIMEOUT` | Default command timeout in ms | 30000 |
| `VIBEKIT_AUTO_CLEANUP` | Auto-delete stopped environments | `false` |
## Development Settings
### Debug Options
| Variable | Description | Default |
|----------|-------------|---------|
| `VIBEKIT_DEBUG` | Enable debug logging | `false` |
| `VIBEKIT_LOG_LEVEL` | Log level (error, warn, info, debug) | `info` |
| `VIBEKIT_LOG_FILE` | Log output file | None (stdout) |
Example:
```bash
export VIBEKIT_DEBUG="true"
export VIBEKIT_LOG_LEVEL="debug"
export VIBEKIT_LOG_FILE="/tmp/vibekit.log"
## Using .env Files
### File Location
The CLI automatically loads `.env` files from:
1. Current working directory
2. Project root (if in a git repository)
3. Home directory (`~/.env`)
### .env File Format
```bash
# .env
# AI API Keys
ANTHROPIC_API_KEY=sk-ant-api03-...
OPENAI_API_KEY=sk-...
# GitHub Integration
GITHUB_TOKEN=ghp_...
GITHUB_REPOSITORY=owner/repo
# Provider Settings
DOCKER_USERNAME=myusername
NORTHFLANK_PROJECT_ID=proj_123
# Defaults
VIBEKIT_DEFAULT_AGENT=claude
VIBEKIT_DEFAULT_MEMORY=4096
# Debug
VIBEKIT_DEBUG=true
### Security Best Practices
1. **Never commit `.env` files** - Add to `.gitignore`
2. **Use `.env.example`** - Template without secrets
3. **Restrict permissions** - `chmod 600 .env`
4. **Rotate keys regularly** - Update API keys periodically
## Command-Specific Variables
### vibekit init
Additional variables during initialization:
```bash
# Skip interactive prompts
export VIBEKIT_INIT_PROVIDERS="Dagger,E2B"
export VIBEKIT_INIT_AGENTS="claude,codex"
export VIBEKIT_INIT_CPU="4"
export VIBEKIT_INIT_MEMORY="4096"
### vibekit local create
Override defaults for environment creation:
```bash
# Set working directory
export VIBEKIT_WORKING_DIR="/app"
# Set default environment variables
export VIBEKIT_ENV_VARS="NODE_ENV=development,PORT=3000"
## Precedence Rules
Environment variables are loaded in this order (later overrides earlier):
1. System environment variables
2. `~/.env` file
3. Project `.env` file
4. Current directory `.env` file
5. Command line options
Example:
```bash
# System env
export ANTHROPIC_API_KEY="old-key"
# .env file
ANTHROPIC_API_KEY=new-key
# Command line (highest priority)
vibekit local create --api-key "newest-key"
## Validation
### Checking Variables
View current settings:
```bash
# All environment variables
env | grep VIBEKIT
# Specific variable
echo $ANTHROPIC_API_KEY
# In environment
vibekit local exec -e my-env -c "env | grep API"
### Required Variables
Commands will fail with clear messages if required variables are missing:
❌ No API key found for claude agent.
Set ANTHROPIC_API_KEY environment variable or use --api-key
## Troubleshooting
### Variables Not Loading
```bash
# Check if .env exists
ls -la .env
# Verify format
cat .env
# Test loading
source .env
echo $ANTHROPIC_API_KEY
### Permission Issues
```bash
# Fix .env permissions
chmod 600 .env
# Check ownership
ls -l .env
### Debugging Variable Loading
```bash
# Enable debug mode
export VIBEKIT_DEBUG=true
# Run command to see variable loading
vibekit local create --name test
## Best Practices
### 1. Use .env.example
Create a template for team members:
```bash
# .env.example
ANTHROPIC_API_KEY=your-anthropic-key-here
OPENAI_API_KEY=your-openai-key-here
GITHUB_TOKEN=your-github-token-here
GITHUB_REPOSITORY=owner/repo
### 2. Separate Environments
Use different files for different environments:
```bash
# .env.development
VIBEKIT_DEFAULT_AGENT=codex
VIBEKIT_DEBUG=true
# .env.production
VIBEKIT_DEFAULT_AGENT=claude
VIBEKIT_DEBUG=false
### 3. Security Script
Check for exposed secrets:
```bash
#!/bin/bash
# check-secrets.sh
files=".env .env.* *.env"
for file in $files; do
if [ -f "$file" ]; then
if grep -q "sk-\|ghp_\|gsk_" "$file"; then
echo "WARNING: $file might contain secrets"
ls -la "$file"
fi
fi
done
## Related Topics
- [Configuration Files](/cli/configuration-files) - Other configuration options
- [Installation](/cli/installation) - Initial setup and configuration
- [Quick Reference](/cli/quick-reference) - Common variable usage
