# Auth & database
SECRET_KEY=generate-with-openssl-rand-base64-32
POSTGRES_PASSWORD=changeme
DATABASE_URL=postgresql://postgres:changeme@localhost:5434/app

# Where uploaded images are stored
MINIO_ROOT_USER=minioadmin
MINIO_ROOT_PASSWORD=minioadmin
MINIO_BUCKET=lumen-uploads

# Which LLM to talk to. DeepSeek by default; any OpenAI-compatible endpoint works.
DEEPSEEK_API_KEY=your-deepseek-api-key-here
DEEPSEEK_BASE_URL=https://api.deepseek.com
DEEPSEEK_MODEL=deepseek-chat

# Optional. Fact-check uses Google search via serper.dev. Leave blank to turn it off.
SERPER_API_KEY=

# Optional. Where to send logs, traces, and session replays.
# Quick start: `docker compose --profile observability up -d hyperdx`,
# open http://localhost:8080, register, copy the Ingestion API Key from
# Team Settings → Integrations, paste it into all four lines below.
OTEL_EXPORTER_OTLP_ENDPOINT=
OTEL_EXPORTER_OTLP_HEADERS=
NEXT_PUBLIC_HYPERDX_API_KEY=
NEXT_PUBLIC_HYPERDX_SERVICE=lumen-web
NEXT_PUBLIC_HYPERDX_URL=

# Your domain. Caddy uses this to fetch a TLS cert in production.
DOMAIN=lumen.example.com

# Optional. Used by some tooling to fetch private GitHub data.
GITHUB_TOKEN=