# Copy to .env and edit. Generate secrets with:
#   python3 -c "import secrets; print(secrets.token_hex(32))"

# Security
WEBHOOK_SECRET=change-me
WEBHOOK_TIMESTAMP_TOLERANCE_SECONDS=30
ADMIN_API_KEY=change-me

# IBKR (7497 = TWS paper, 7496 = TWS live, 4002 = Gateway paper)
IBKR_HOST=127.0.0.1
IBKR_PORT=7497
IBKR_CLIENT_ID=1

# Risk limits
MAX_POSITION_SIZE=100
MAX_DAILY_LOSS=500.0
MAX_PORTFOLIO_EXPOSURE=0.25
MAX_DAILY_TRADES=50

# Circuit breaker
CIRCUIT_BREAKER_THRESHOLD=3
CIRCUIT_BREAKER_TIMEOUT=60

# Telegram (optional)
TELEGRAM_BOT_TOKEN=
TELEGRAM_CHAT_ID=

# Persistence / reconciliation
DATABASE_PATH=trading.db
RECONCILIATION_INTERVAL=60
RECONCILIATION_TOLERANCE=0
AUTO_HALT_ON_MISMATCH=true

# Feature flags
TRADING_ENABLED=true
DRY_RUN=false
ENABLE_RISK_ENGINE=true
ENABLE_ORDER_EXECUTION=true
ENABLE_TELEGRAM=false
ENABLE_RECONCILIATION=true

LOG_LEVEL=INFO