# Caseflow — environment template. Copy to .env and fill in.

# =============================================================================
# Application
# =============================================================================
APP_ENV=dev
LOG_LEVEL=INFO
API_HOST=0.0.0.0
API_PORT=8000

# =============================================================================
# Auth (v1: local users + JWT; SSO scaffold lives behind SSO_ENABLED flag)
# =============================================================================
# Generate with: python -c "import secrets; print(secrets.token_urlsafe(64))"
JWT_SECRET=change-me-in-prod
JWT_ALGORITHM=HS256
JWT_EXPIRY_MINUTES=480
SSO_ENABLED=false
# GOOGLE_OAUTH_CLIENT_ID=
# GOOGLE_OAUTH_CLIENT_SECRET=
# GOOGLE_OAUTH_REDIRECT_URI=

# =============================================================================
# Postgres (users, RBAC, audit_log, dispatch_status, ingestion_runs)
# =============================================================================
POSTGRES_URL=postgresql+psycopg://caseflow:caseflow@localhost:5432/caseflow

# =============================================================================
# MongoDB (cases, documents, addresses, intel, traces, report metadata)
# =============================================================================
MONGODB_URI=mongodb://localhost:27017/caseflow
MONGODB_TIMEOUT_MS=5000

# =============================================================================
# Object storage (MinIO in dev; S3/GCS later)
# =============================================================================
OBJECT_STORE_ENDPOINT=localhost:9000
OBJECT_STORE_ACCESS_KEY=caseflow
OBJECT_STORE_SECRET_KEY=caseflow
OBJECT_STORE_BUCKET=caseflow-reports
OBJECT_STORE_SECURE=false

# =============================================================================
# Provider APIs (optional)
# =============================================================================
# The public version ships with FakeProvider only. If you wire your own
# AttributionProvider implementations, configure their credentials here.

# =============================================================================
# TLP defaults
# =============================================================================
# Default classification for new cases/documents when source doesn't specify.
DEFAULT_TLP=AMBER