# Server-side Gemini key (read by the backend only; never use the VITE_ prefix for secrets).
GEMINI_API_KEY=your_api_key_here

# Secret used to sign login tokens. Required when BUFIN_ENV=production (min 32 chars);
# in development an insecure built-in secret is used with a warning.
# Generate one with: python -c "import secrets; print(secrets.token_urlsafe(48))"
# BUFIN_ENV=production
# JWT_SECRET_KEY=

# Optional: local model routing for lightweight AI tasks (transaction classification,
# tips, spending alerts). Requires Ollama running locally with OLLAMA_MODEL pulled.
# Falls back to Gemini automatically if unset, disabled, or unreachable.
# OLLAMA_ENABLED=true
# OLLAMA_HOST=http://localhost:11434
# OLLAMA_MODEL=phi4-mini

# Optional: override the Gemini model used for reasoning-heavy calls (purchase
# analysis, coach chat). Defaults to gemini-3-flash.
# GEMINI_REASONING_MODEL=gemini-3-flash

# Optional: backend API base URL for the frontend (default: http://localhost:8000/api).
# Set this when the backend runs on another port or host.
# VITE_API_URL=http://localhost:8001/api