# DERA API Gateway Configuration Example
# Copy to .env for local development. Never commit real secrets or production credentials.

# Application Identity
APP_NAME="DERA API Gateway"
APP_ENV="development"
APP_DEBUG=false

# Networking
APP_HOST="127.0.0.1"
APP_PORT=8000

# Logging & Observability Baseline
APP_LOG_LEVEL="INFO"
APP_REQUEST_ID_HEADER="X-Request-ID"

# Routing & Documentation
APP_API_PREFIX="/api/v1"
APP_DOCS_ENABLED=true

# Security & CORS (Comma-separated allowed origins)
APP_CORS_ORIGINS="http://localhost:3000,http://127.0.0.1:3000"

# Architectural Safeguards (Immutable / Deterministic Non-AI Guarantees)
READ_ONLY_ENFORCED=true
ZERO_AI_POLICY_ENFORCED=true

# Platform Database Configuration (PostgreSQL 16+ via SQLAlchemy Asyncpg)
# NOTE: Platform database stores internal DERA operational metadata.
# Strictly separated from customer target databases inspected in Phase 5+.
DERA_PLATFORM_DATABASE_URL="postgresql+asyncpg://dera_user:dera_password@localhost:5432/dera_platform"
DERA_DB_POOL_SIZE=10
DERA_DB_MAX_OVERFLOW=5
DERA_DB_POOL_TIMEOUT=30.0
DERA_DB_POOL_RECYCLE=1800
DERA_DB_CONNECT_TIMEOUT=10.0
DERA_DB_STATEMENT_TIMEOUT_MS=30000
DERA_DB_SSL_MODE="prefer"
DERA_DB_ECHO=false