# Optional direct overrides. Never commit a populated .env file.
CRYPTOTRACKER_ETHERSCAN_API_KEY=replace-me-with-api-key-from-etherscan

# The API independently supports HTTP on 8192 and HTTPS on 8194.
CRYPTOTRACKER_HTTPS_ENABLED=true
CRYPTOTRACKER_HTTPS_PORT=8194
CRYPTOTRACKER_HTTPS_CERT_PATH=/app/data/certs/server.crt
CRYPTOTRACKER_HTTPS_KEY_PATH=/app/data/certs/server.key
CRYPTOTRACKER_HTTPS_GENERATE_SELF_SIGNED=true
CRYPTOTRACKER_SHARED_CERT_PATH=/app/data/certs/server.crt
CRYPTOTRACKER_SHARED_KEY_PATH=/app/data/certs/server.key

# Optional shared cache for saved dashboard chart requests. PostgreSQL remains
# authoritative and is used whenever Redis is disabled or unavailable.
CRYPTOTRACKER_REDIS_ENABLED=false
CRYPTOTRACKER_REDIS_URL=redis://redis:6379
CRYPTOTRACKER_REDIS_KEY_PREFIX=cryptotracker
CRYPTOTRACKER_REDIS_RESULT_TTL_SECONDS=2592000
CRYPTOTRACKER_REDIS_CONNECT_TIMEOUT_MS=2000
# CRYPTOTRACKER_REDIS_PASSWORD=replace-me

# The MCP sidecar is independently configurable. HTTPS is on by default;
# plaintext HTTP is opt-in for trusted local development.
CRYPTOTRACKER_MCP_ENABLED=true
CRYPTOTRACKER_MCP_READ_ONLY=false
CRYPTOTRACKER_MCP_HTTP_ENABLED=false
CRYPTOTRACKER_MCP_HTTP_PORT=8195
CRYPTOTRACKER_MCP_HTTPS_ENABLED=true
CRYPTOTRACKER_MCP_HTTPS_PORT=8193

# Compose supplies this dedicated key to both the API and MCP sidecar. Do not
# reuse it as a client-facing MCP key.
CRYPTOTRACKER_MCP_UPSTREAM_API_KEY=replace-with-a-dedicated-upstream-api-key
CRYPTOTRACKER_MCP_UPSTREAM_BASE_URL=http://cryptotracker:8192
# Deployment alternative:
# CRYPTOTRACKER_MCP_UPSTREAM_BASE_URL=https://cryptotracker:8194

# MCP clients authenticate with named Bearer API keys distinct from the
# upstream key.
CRYPTOTRACKER_MCP_READ_CLIENT_API_KEYS=[{name:'mcp-reader',key:'replace-with-a-distinct-reader-api-key'}]
CRYPTOTRACKER_MCP_READWRITE_CLIENT_API_KEYS=[{name:'mcp-automation',key:'replace-with-a-distinct-readwrite-api-key'}]

CRYPTOTRACKER_MCP_RATE_LIMIT_WINDOW_SECONDS=60
CRYPTOTRACKER_MCP_RATE_LIMIT_READ=300
CRYPTOTRACKER_MCP_RATE_LIMIT_WRITE=120
CRYPTOTRACKER_MCP_RATE_LIMIT_DESTRUCTIVE=30