Environment variables

The client reads four variables in normal use. A few more change only how it prints, two reach a relay behind Cloudflare Access, and three matter for one provider.

Variable	Effect
`AILE_SERVER_URL`	Default relay server. Overridden by the `serverUrl` config key only if that key is explicitly set, and by `--server` always.
`AILE_DATA_DIR`	Override the whole state directory (`config.json`, machine id, node secret).
`AILE_TOKEN`	Account token for `aile login` and `aile register`. The non-interactive path.
`AILE_NO_UPDATE_CHECK`	Set to `1` to silence the "newer version available" notice. `NO_UPDATE_NOTIFIER` and `CI` do the same.

Precedence

For the server address, from weakest to strongest:

The built-in default, https://api.aile.sh.
AILE_SERVER_URL.
The serverUrl key in config.json.
--server <url> on the command line.

--server is per-invocation and writes nothing, so it is the right way to point one command at a staging relay without disturbing the machine's configuration.

Non-interactive setup

This is enough to bring up a sharer node in an image or a provisioning script with no terminal interaction:

Terminalbash

1export AILE_TOKEN="…"
2export AILE_NO_UPDATE_CHECK=1
3
4aile register          # enrol this machine against the token
5aile connect groq --key -   # feed the provider key on stdin
6aile start

Keep the key off the process list

--key - reads from stdin, so the provider key never appears in ps output or in shell history. --key <value> is accepted but visible to any process on the box that can read the process table.

Machine label

By default the client sends this machine's hostname so the approval page can tell you which box is asking. To withhold it:

Terminalbash

1AILE_NO_MACHINE_LABEL=1 aile login

The approval page then identifies the request only by its code.

Output

Variable	Effect
`NO_COLOR`	No colour, whatever its value (unless empty). Beats `FORCE_COLOR`.
`FORCE_COLOR`	Colour even off a terminal, unless it is `0` or empty.
`AILE_ASCII`	Set to `1` for plain ASCII marks instead of ✓ ✗ ❯ ●.
`AILE_NO_SPINNER`	Set to `1` to turn off spinners.
`AILE_DEBUG`	Set to `1` to print the full error behind a one-line failure message.

Self-hosted models

Read by aile local and, for an engine aile manages, aile start.

Variable	Effect
`HF_TOKEN`	Hugging Face token, for a gated or private repo. Read from the environment, sent only to huggingface.co, never saved.
`OLLAMA_HOST`	Where Ollama listens, as Ollama itself reads it. `0.0.0.0` is reached on `127.0.0.1`.
`OLLAMA_MODELS`	Ollama's model folder, used for the free-disk check.
`AILE_LLAMA_SERVER_BIN`	Use your own `llama-server` build instead of downloading the pinned one.
`AILE_HF_URL`	A Hugging Face mirror (https).
`AILE_LLAMACPP_URL`	A mirror for the pinned llama.cpp downloads. Each is still checked against its sha256.
`AILE_LOCAL_NO_INSTALL`	Set to `1` to refuse installing Ollama on this machine outright. llama.cpp, which installs nothing system-wide, is unaffected.
`AILE_LOCAL_HW`	JSON that replaces detected hardware, for a GPU the probes miss: `{"vramBytes": 24000000000, "accel": "cuda"}`.

Your own wallet

Read only by your optional own wallet (aile wallet own). The first two are the environment form of config keys: a value set with aile config wins over them, as with AILE_SERVER_URL.

Variable	Effect
`AILE_SOLANA_RPC`	Solana RPC URL, for example `https://solana-mainnet.g.alchemy.com/v2/<key>`. Same as the `solanaRpc` key.
`AILE_SOLANA_NETWORK`	`mainnet` or `devnet`. Same as the `walletNetwork` key.
`AILE_WALLET_PASSPHRASE`	Unlocks your own wallet when it is encrypted without a prompt, for scripts. `--passphrase` does the same for one command.
`JUPITER_API_KEY`	A Jupiter API key for `aile wallet own swap`, sent only to Jupiter. Optional.
`AILE_JUPITER_URL`	Another Jupiter API base URL (default `https://api.jup.ag`).

The client reads no .env file. To keep an RPC key out of your shell profile, save it once with aile config solanaRpc <url>: config.json is written readable by you only, and aile config prints the value masked.

Cloudflare Access

For a relay you run behind Cloudflare Access. The client sends both as Access's service-token headers on every call to the relay, and sends neither unless both are set. The public aile.sh relay should never ask for them. They are read from the environment only, never from config.json.

Variable	Effect
`CF_ACCESS_CLIENT_ID`	Service token client id.
`CF_ACCESS_CLIENT_SECRET`	Service token client secret.

GitLab Duo

These are consulted only when linking that one provider, which needs an OAuth client of your own:

Variable	Effect
`GITLAB_DUO_OAUTH_CLIENT_ID`	OAuth client id.
`GITLAB_DUO_OAUTH_CLIENT_SECRET`	OAuth client secret.
`GITLAB_DUO_BASE_URL`	Base URL for a self-managed GitLab instance.

Without a client id configured on the relay, GitLab Duo models are hidden from GET /v1/models rather than advertised and then failing.