# default local path (postgres on :5432):
DATABASE_URL=postgresql://atharva@localhost:5432/privacyradar

# docker alternative (compose maps postgres to localhost:5433):
# DATABASE_URL=postgresql://privacyradar:privacyradar@localhost:5433/privacyradar

# redis (job queue)
REDIS_URL=redis://localhost:6379/0

# openai: only used when a policy hash actually changes
OPENAI_API_KEY=
OPENAI_EXTRACT_MODEL=gpt-4.1-mini
OPENAI_HARD_MODEL=gpt-5.6

# worker
CRAWL_USER_AGENT=privacyradar/0.1 (+https://privacyradar.local; research crawler)
CRAWL_DELAY_SECONDS=2
PLAYWRIGHT_FALLBACK=false

# optional: only for the 10% of pages that return empty html
FIRECRAWL_API_KEY=

# consumer auth (web). Email + password is the primary sign-in; set AUTH_SECRET locally.
# AUTH_DELIVERY=fixture writes hashed magic-link URLs to auth_magic_inbox for Playwright.
AUTH_SECRET=
AUTH_DELIVERY=fixture
BETTER_AUTH_URL=http://127.0.0.1:3000

# assistant (web). The chat assistant turns on when OPENAI_API_KEY is set.
# ASSISTANT_ENABLED=false is the kill switch. ASSISTANT_MODEL overrides the chat model.
# ASSISTANT_ENABLED=
# ASSISTANT_MODEL=gpt-4.1-mini

# notifications. CI and local tests keep the fake adapter.
NOTIFY_PROVIDER=fake
PUBLIC_BASE_URL=http://127.0.0.1:3000
# RESEND_API_KEY=
# RESEND_WEBHOOK_SECRET=