# Copy this file to .env and fill in real paths/keys. .env is gitignored.

# Earth Engine service-account key (weather + terrain agents).
# Optional — agents fall back to the first ee-*.json in credentials\.
EE_SERVICE_ACCOUNT_JSON=credentials\ee-my-hhussain-82d4047d0b39.json

# Copernicus CDS API key for GloFAS (river agent) lives in
# credentials\cdsapi.json (cdsapi reads it via CDSAPI_RC below).
CDSAPI_RC=credentials\cdsapi.json

# NASA Earthdata (population/exposure downloads, if needed)
EARTHDATA_CREDENTIALS=credentials\earthdata-credentials.json

# --- LLM keys (chat + warning wording only — NEVER risk scoring) ------
# Chat assistant provider chain (first configured wins):
#   1. Any OpenAI-compatible endpoint:
#      CHATBOT_BASE_URL=https://...   CHATBOT_API_KEY=...   CHATBOT_MODEL=...
#   2. Groq free tier — open-source Llama 3.3 70B, free key from
#      console.groq.com (no credit card):
GROQ_API_KEY=gsk_your-key-here
#   3. Ollama running locally (fully offline; install from ollama.com,
#      then `ollama pull llama3.1`) — auto-detected, no key needed.
#   4. Anthropic (also used for warning-text drafting):
ANTHROPIC_API_KEY=sk-ant-your-key-here

# Meteoblue (weather agent: station-quality "temperature now" point
# reading at the AOI centre; free key from meteoblue.com → API).
# Optional — without it the agent falls back to GFS 2 m model values.
METEOBLUE_API_KEY=your-meteoblue-key-here

# Portal login (single-operator auth). FLASK_SECRET_KEY signs the
# session cookie — generate with: python -c "import secrets; print(secrets.token_hex(32))"
PORTAL_EMAIL=you@example.com
PORTAL_PASSWORD=change-me
FLASK_SECRET_KEY=generate-a-random-hex-string

# "Continue with Google": OAuth 2.0 Web client ID from
# console.cloud.google.com > APIs & Services > Credentials.
# Add the portal URL to "Authorized JavaScript origins".
# Leave empty to hide the Google button.
GOOGLE_CLIENT_ID=