# Damn Vulnerable Startup - Environment Configuration
# Copy to .env and customize as needed

# Session signing key (change in production)
SECRET_KEY=change-me-in-production

# Database connection string
DATABASE_URL=sqlite:///data/dvs.db

# CTF mode: enables flag display on challenge solve
CTF_MODE=false

# HMAC secret for deterministic flag generation
CTF_KEY=default-ctf-key-change-me

# LLM provider: mock | openai | anthropic | ollama
LLM_PROVIDER=mock

# Only needed if LLM_PROVIDER=openai
OPENAI_API_KEY=sk-your-key-here

# Only needed if LLM_PROVIDER=anthropic
ANTHROPIC_API_KEY=ak-your-key-here

# Only needed if LLM_PROVIDER=ollama
# Use http://localhost:11434 when running locally (not in Docker)
# Use http://host.docker.internal:11434 when running in Docker with host Ollama
OLLAMA_BASE_URL=http://localhost:11434
# Fine-tuned BroBot models are planned for a later release.
# Use any Ollama model you have pulled locally, mock is default.
OLLAMA_MODEL=llama3.2:3b

# Print raw SQL to stdout (learning aid)
SQL_ECHO=false

# Enable RCE/deserialization challenges (disabled by default for safety)
UNSAFE_CHALLENGES=false

# Global default difficulty tier: intern | junior | senior | tech_lead
DEFAULT_DIFFICULTY=intern