# Enterprise Deployment Environment Variables
# Copy to .env: cp .env.example .env
#
# Vars hardcoded in docker-compose.yml (don't set here unless overriding):
#   AUTH_MODE, WAITLIST_ENABLED, DATABASE_DRIVER, DATABASE_URL,
#   OIDC_ISSUER, OIDC_DISCOVERY_URL, OIDC_CLIENT_ID, OIDC_CLIENT_SECRET, BETTER_AUTH_URL,
#   APP_URL, TRUSTED_ORIGINS, CORS_ORIGINS,
#   POWERSYNC_URL, POWERSYNC_JWT_SECRET, POWERSYNC_JWT_KID, RATE_LIMIT_ENABLED

# Ports — change these if they conflict with your dev stack
FRONTEND_PORT=3000
BACKEND_PORT=8000
KEYCLOAK_PORT=8180
POSTGRES_PORT=5434
POWERSYNC_PORT=8081

# General settings
LOG_LEVEL=INFO

# Required — used to sign bearer tokens and session cookies. Generate with: openssl rand -base64 32
BETTER_AUTH_SECRET=

# Health Check Configuration
MONITORING_TOKEN=

# API Keys
FIREWORKS_API_KEY=
EXA_API_KEY=
MISTRAL_API_KEY=
ANTHROPIC_API_KEY=

# Thunderbolt Inference
THUNDERBOLT_INFERENCE_URL=
THUNDERBOLT_INFERENCE_API_KEY=

# OAuth Settings (optional — for Google/Microsoft sign-in alongside OIDC)
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
MICROSOFT_CLIENT_ID=
MICROSOFT_CLIENT_SECRET=

# Analytics (optional)
POSTHOG_HOST=
POSTHOG_API_KEY=

# Build — source maps are disabled by default for security (prevents exposing source code via .map files).
# Enable in CI to upload maps to PostHog for error tracking.
ENABLE_SOURCEMAP=false

# OpenTelemetry (optional)
OTEL_EXPORTER_OTLP_ENDPOINT=
OTEL_EXPORTER_OTLP_TOKEN=

# PowerSync
POWERSYNC_TOKEN_EXPIRY_SECONDS=3600

# Resend (email — optional)
RESEND_API_KEY=