# ── Aegis Lite — Environment Configuration ───────────────────────────────────
#
# Copy this file to .env and fill in the values.
# Never commit .env to version control.
#
# Generate SECRET_KEY with:
#   openssl rand -hex 32

# ── Core ──────────────────────────────────────────────────────────────────────

# Edition identifier — determines which features are enabled.
AEGIS_EDITION=lite

# Strong random secret for JWT signing. Required in production.
SECRET_KEY=change-me-in-production

# Set LOCAL_DEV=true to allow weak secrets and skip the training gate in development.
LOCAL_DEV=false

# Database — defaults to SQLite (zero-ops local). Use PostgreSQL URL for production.
# SQLite:     sqlite+aiosqlite:///./aegis_lite.db
# PostgreSQL: postgresql+asyncpg://user:password@host:5432/aegis_lite
DATABASE_URL=sqlite+aiosqlite:///./aegis_lite.db

# ── AI Provider Keys ─────────────────────────────────────────────────────────
# At least one key is required for live AI responses.
# Without any key, the app runs in demo mode with simulated responses.

ANTHROPIC_API_KEY=
OPENAI_API_KEY=
OPENROUTER_API_KEY=
PERPLEXITY_API_KEY=

# ── Defaults ──────────────────────────────────────────────────────────────────

# Default monthly AI spend limit per user (USD).
DEFAULT_MONTHLY_BUDGET=20.0

# Comma-separated allowed CORS origins.
CORS_ORIGINS=http://localhost:3000,http://localhost:3001

# ── Frontend ──────────────────────────────────────────────────────────────────

# URL the Next.js dev server proxies backend requests to.
API_URL=http://localhost:8100