# Global AQ Intelligence Pipeline — Environment Variables
# Copy this file to .env and fill in your keys
# NEVER commit .env to git

# ── OpenAQ ────────────────────────────────────────────────
# Free account: https://api.openaq.org
OPENAQ_API_KEY=your_openaq_api_key_here

# ── EPA AirNow (US real-time AQI) ─────────────────────────
# Free account: https://docs.airnowapi.org/account/request/
AIRNOW_API_KEY=your_airnow_api_key_here

# ── PostgreSQL ─────────────────────────────────────────────
POSTGRES_HOST=localhost
POSTGRES_PORT=5432
POSTGRES_DB=aq_intelligence
POSTGRES_USER=postgres
POSTGRES_PASSWORD=your_postgres_password_here
POSTGRES_SSLMODE=prefer

# ── Azure migration/export helpers ─────────────────────────
# Used by scripts/deployment/migrate_db_to_azure.sh only.
LOCAL_POSTGRES_HOST=localhost
LOCAL_POSTGRES_PORT=5432
LOCAL_POSTGRES_DB=indiaaq
LOCAL_POSTGRES_USER=postgres
LOCAL_POSTGRES_PASSWORD=your_local_postgres_password_here
AZURE_POSTGRES_HOST=your-server.postgres.database.azure.com
AZURE_POSTGRES_PORT=5432
AZURE_POSTGRES_DB=indiaaq
AZURE_POSTGRES_USER=postgresadmin
AZURE_POSTGRES_PASSWORD=your_azure_postgres_password_here

# ── NASA POWER & FIRMS ─────────────────────────────────────
# No keys required — public APIs
# NASA POWER: https://power.larc.nasa.gov/api/
# NASA FIRMS: https://firms.modaps.eosdis.nasa.gov/

# ── GitHub (for auto-commit deploy pipeline) ───────────────
# Personal Access Token with repo scope
# Generate at: https://github.com/settings/tokens
GITHUB_TOKEN=your_github_pat_here
GITHUB_REPO=divyanshailani/global-aq-intelligence

# ── Frontend data output path ──────────────────────────────
# Path to the Next.js frontend public/data directory
FRONTEND_DATA_PATH=../global-aq-intelligence/public/data

# ── API/Admin security ─────────────────────────────────────
# Comma-separated frontend origins allowed to call api/main.py
API_CORS_ORIGINS=http://localhost:3000,http://127.0.0.1:3000
# Set this before exposing scripts/deployment/admin_dashboard.py beyond localhost.
ADMIN_TOKEN=replace_with_a_long_random_token
ADMIN_PUBLIC_READ=false
ADMIN_ALLOW_UNAUTH_REMOTE=false