# ============================================================
# RUBICON — Environment Variables
# Copy this to .env and fill in your values.
# .env is gitignored and must NEVER be committed.
# ============================================================

# ─── IBM watsonx (optional: product works without these) ───
WATSONX_API_KEY=your-watsonx-api-key-placeholder
WATSONX_PROJECT_ID=your-watsonx-project-id-placeholder
WATSONX_URL=https://us-south.ml.cloud.ibm.com
WATSONX_MODEL_ID=ibm/granite-3-8b-instruct

# ─── Rubicon API (frontend to backend) ───────────────────────
NEXT_PUBLIC_RUBICON_API_URL=https://rubicon-api-ecf2.onrender.com

# ─── Rubicon signing key path (OUTSIDE workspace) ───────────
# Path to the Ed25519 private key file stored outside this repo.
# Example: /home/youruser/.rubicon/rubicon-signer.key
# On Windows: C:\Users\youruser\.rubicon\rubicon-signer.key
RUBICON_SIGNING_KEY_PATH=

# ─── Rubicon public key (committed; path inside repo) ────────
RUBICON_PUBLIC_KEY_PATH=keys/rubicon-verifier.pub.pem

# ─── Vercel deployment (frontend) ────────────────────────────
# NEXT_PUBLIC_RUBICON_API_URL is also used here; set in Vercel env panel.

# ─── Demo/lab settings ───────────────────────────────────────
RUBICON_LAB_REMOTE_PATH=./rubicon-lab-remote.git
RUBICON_POLICY_VERSION=1.0.0
RUBICON_VERIFIER_VERSION=1.0.0

# ─── SQLite ledger ───────────────────────────────────────────
RUBICON_LEDGER_PATH=./data/rubicon.db