LockIn
by Sky-walkerX
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SIGNUP | No | `open` (the default) lets anyone who can reach the address make an account. `closed` stops new accounts once the first one exists. | open |
| SMTP_FROM | No | Optional. From address for outgoing email. | |
| SMTP_HOST | No | Optional. Outgoing email host. With it set, LockIn sends account confirmation and password reset emails. | |
| SMTP_PORT | No | Optional. Outgoing email port. | |
| SMTP_USER | No | Optional. Outgoing email username. | |
| DIRECT_URL | No | Postgres connection string used for migrations. For Supabase use the session pooler (:5432, no pgbouncer params). Must not be a copy of DATABASE_URL on Supabase. | |
| INGEST_URL | No | Optional. URL of the ingest service for PDF and web-page text extraction plus server-side embeddings, e.g. http://ingest:8080. | |
| PUBLIC_URL | No | The address people open LockIn at. For HTTPS deployments set it to your domain, e.g. https://notes.example.com (no trailing slash). Used to build the links in confirmation and password reset emails. | http://localhost:3000 |
| AUTH_SECRET | Yes | Required. Signs sessions and upload links. Generate one with `openssl rand -base64 32`. Keep it with your backups: a restored copy with a different secret signs everyone out. | |
| LOCKIN_BIND | No | Which of the machine's addresses that port listens on. Default 127.0.0.1 (the machine itself, i.e. you or a proxy running on it). Set to 0.0.0.0 to reach LockIn from other machines without a proxy (also set TRUSTED_PROXY_HOPS=0), though traffic is then unencrypted. | 127.0.0.1 |
| LOCKIN_PORT | No | Host port LockIn listens on. | 3000 |
| RATE_LIMITS | No | `off` drops the built-in rate limits. Default `on`. | on |
| DATABASE_URL | No | Postgres connection string, runtime. For Supabase use the transaction pooler (:6543, pgbouncer=true). | |
| NEXTAUTH_URL | No | The app's base URL, e.g. http://localhost:3000. | |
| INGEST_SECRET | No | Optional. Any long random string, required together with INGEST_URL to enable text extraction and server-side embeddings. | |
| OPERATOR_NAME | No | Optional. Your name, shown on the privacy and terms pages. | |
| SMTP_PASSWORD | No | Optional. Outgoing email password. | |
| OPERATOR_EMAIL | No | Optional. When set, /privacy and /terms pages appear, linked from the landing and sign-up pages, naming you as the one to write to. | |
| NEXTAUTH_SECRET | No | Secret used by NextAuth. | |
| GOOGLE_CLIENT_ID | No | Optional. "Continue with Google" appears only when both GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET are set. | |
| OPERATOR_HOSTING | No | Optional. A sentence of your own, shown on the privacy page, on where the data is kept and how long backups are. | |
| STORAGE_QUOTA_MB | No | Megabytes of images and PDFs each account may store. `0` for no ceiling. | 1024 |
| POSTGRES_PASSWORD | No | Password for the bundled Postgres database. | |
| TRUSTED_PROXY_HOPS | No | How many reverse proxies stand in front of LockIn. Default `1`; `0` when visitors reach the port directly. With a CDN in front of the proxy as well, set it to `2`. | 1 |
| GOOGLE_CLIENT_SECRET | No | Optional. "Continue with Google" appears only when both GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET are set. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues