Standalone runtime
Shared terminal runtime
Authentication
Default behavior: every non-health endpoint requires a token.WEB_UI_TOKEN is empty, Eyra generates a session token and prints a tokenized URL. Keep that URL private.
WEB_UI_REQUIRE_TOKEN=false is allowed only when WEB_UI_HOST is localhost. Non-localhost binds always require auth.
Network binding
WEB_UI_HOST=0.0.0.0 only when you intentionally want access from another device on your network.
Local voice turn
The browser can upload audio for a local voice turn. The server transcribes through Local Whisper, then routes the turn through Eyra. The request size limit isWEB_UI_MAX_REQUEST_BYTES.