[TEMPLATE]
# ── Database ─────────────────────────────────────────────
DATABASE_PASSWORD=creditrisk_secret

# ── Security ─────────────────────────────────────────────
# Generate: openssl rand -base64 48
JWT_SECRET=change-me-generate-a-long-random-string
JWT_EXPIRATION_MS=86400000

# ── Kafka ────────────────────────────────────────────────
KAFKA_BOOTSTRAP_SERVERS=localhost:9092
KAFKA_TOPIC_APPLICATION_EVENTS=application-events
KAFKA_TOPIC_RISK_EVENTS=risk-events
KAFKA_TOPIC_DECISION_EVENTS=decision-events
KAFKA_TOPIC_AUDIT_EVENTS=audit-events

# ── Service-to-service (inside Docker network) ───────────
CUSTOMER_SERVICE_URL=http://customer-service:8081
APPLICATION_SERVICE_URL=http://application-service:8082
RISK_SERVICE_URL=http://risk-service:8083
DECISION_SERVICE_URL=http://decision-service:8084
AUDIT_SERVICE_URL=http://audit-service:8085
ML_SERVICE_URL=http://ml-service:8001

# ── Frontend ─────────────────────────────────────────────
# Public URL of the API (used by the deployed frontend when not same-origin)
# e.g. https://api.yourdomain.com or http://<vm-public-ip>
VITE_API_URL=
# Origins allowed by the gateway's CORS (comma-separated)
CORS_ORIGINS=http://localhost:3000

# ── JVM sizing (tuned for a 12GB Oracle Free ARM VM) ─────
JAVA_TOOL_OPTIONS=-Xms256m -Xmx512m -XX:+UseSerialGC -XX:MaxRAMPercentage=75.0

# ── Application ──────────────────────────────────────────
SPRING_PROFILES_ACTIVE=local

# ── Cloud (only for AWS/Terraform deployment) ────────────
AWS_REGION=us-east-1