# HealthTrack configuration
# Copy to .env (docker compose) or set as container environment variables.
# Every variable except APP_URL is optional.

# Absolute URL users browse to — REQUIRED for login/auth callbacks to work.
# Must match exactly what's in the address bar (scheme, host, port).
# Behind a reverse proxy, use the public HTTPS URL.
APP_URL=http://localhost:3000

# Session signing secret. Leave unset — one is auto-generated into
# /data/keys on first start. Set only to manage it yourself (64 hex chars).
#AUTH_SECRET=

# Key used to encrypt stored OAuth tokens (Oura). Leave unset — auto-generated
# into /data/keys on first start.
#ENCRYPTION_KEY=

# Registration policy. Default (unset): INVITE-ONLY — the very first account
# registers freely and becomes admin; after that, new accounts need a
# single-use invite link (Settings → Invites). Set to "true" to open
# registration to anyone, or "false" to close it completely (invites too).
#SIGNUPS_ENABLED=

# --- Optional integrations (features hide in the UI when unset) ---

# Anthropic API key — enables AI features: health summaries, natural-language
# queries, medication interaction checks, lab/vaccine PDF parsing.
#ANTHROPIC_API_KEY=

# Optional: override the Claude model used for REASONING features (health
# summaries, natural-language queries, interaction checks). Defaults to the
# current Sonnet generation; set claude-opus-4-8 for maximum intelligence.
# See https://docs.claude.com/en/docs/about-claude/models
#ANTHROPIC_MODEL=claude-sonnet-5

# Optional: override the model used for EXTRACTION (lab/vaccine PDF parsing —
# mechanical transcription). Defaults to the current Sonnet generation; a
# cheaper model such as claude-haiku-4-5 usually performs fine here.
#ANTHROPIC_MODEL_EXTRACTION=claude-sonnet-5

# Google OAuth — enables "Sign in with Google".
# Authorized redirect URI: <APP_URL>/api/auth/callback/google
#GOOGLE_CLIENT_ID=
#GOOGLE_CLIENT_SECRET=

# Oura OAuth — enables Oura Ring sync (sleep, heart rate, activity).
# Redirect URI: <APP_URL>/api/oura/callback
#OURA_CLIENT_ID=
#OURA_CLIENT_SECRET=

# --- Container conventions ---

# File ownership inside /data (Unraid defaults shown).
#PUID=99
#PGID=100

# Container time zone, e.g. America/New_York.
#TZ=Etc/UTC

# --- Development only ---

# Where local dev state lives (SQLite db, uploads, keys). Defaults to ./data.
#DATA_DIR=./data