# Compliance Copilot - Environment Configuration

# Application
APP_NAME=Compliance Copilot
APP_VERSION=1.0.0
DEBUG=true
API_V1_PREFIX=/api/v1

# Security
SECRET_KEY=your-secret-key-min-32-characters-change-in-production
ENCRYPTION_KEY=your-32-char-encryption-key-change-in-production
ALGORITHM=HS256
ACCESS_TOKEN_EXPIRE_MINUTES=30
REFRESH_TOKEN_EXPIRE_DAYS=7

# Database
DATABASE_URL=postgresql+asyncpg://compliance:compliance@postgres:5432/compliance_copilot
DATABASE_POOL_SIZE=20
DATABASE_MAX_OVERFLOW=10

# Redis
REDIS_URL=redis://redis:6379/0
REDIS_POOL_SIZE=10

# Database Sync (for Alembic)
DATABASE_URL_SYNC=postgresql://compliance:compliance@postgres:5432/compliance_copilot

# Security
BCRYPT_ROUNDS=12
API_KEY_LENGTH=32

# CORS
CORS_ORIGINS=http://localhost:3000,http://localhost:3001,http://localhost:8000
CORS_ALLOW_CREDENTIALS=true

# AWS
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_REGION=us-east-1
AWS_DEFAULT_REGION=us-east-1

# GCP
GCP_PROJECT_ID=
GCP_SERVICE_ACCOUNT_KEY=

# Azure
AZURE_TENANT_ID=
AZURE_CLIENT_ID=
AZURE_CLIENT_SECRET=
AZURE_SUBSCRIPTION_ID=

# GitHub
GITHUB_TOKEN=
GITHUB_APP_ID=
GITHUB_APP_PRIVATE_KEY=

# GitLab
GITLAB_TOKEN=
GITLAB_URL=https://gitlab.com

# Bitbucket
BITBUCKET_CLIENT_ID=
BITBUCKET_CLIENT_SECRET=

# Okta
OKTA_DOMAIN=
OKTA_API_TOKEN=

# Azure AD / Entra ID
AZURE_AD_TENANT_ID=
AZURE_AD_CLIENT_ID=
AZURE_AD_CLIENT_SECRET=

# Google Workspace
GOOGLE_WORKSPACE_ADMIN_EMAIL=
GOOGLE_WORKSPACE_SERVICE_ACCOUNT_KEY=

# Okta
OKTA_DOMAIN=
OKTA_API_TOKEN=

# 1Password
ONEPASSWORD_CONNECT_HOST=
ONEPASSWORD_CONNECT_TOKEN=

# JumpCloud
JUMPCLOUD_API_KEY=

# Datadog
DATADOG_API_KEY=
DATADOG_APP_KEY=
DATADOG_SITE=datadoghq.com

# PagerDuty
PAGERDUTY_API_KEY=

# Splunk
SPLUNK_HOST=
SPLUNK_TOKEN=

# CrowdStrike
CROWDSTRIKE_CLIENT_ID=
CROWDSTRIKE_CLIENT_SECRET=

# SentinelOne
SENTINELONE_API_TOKEN=
SENTINELONE_API_URL=

# Jira
JIRA_URL=
JIRA_EMAIL=
JIRA_API_TOKEN=

# Linear
LINEAR_API_KEY=

# Asana
ASANA_PERSONAL_ACCESS_TOKEN=

# Slack
SLACK_BOT_TOKEN=
SLACK_SIGNING_SECRET=
SLACK_APP_TOKEN=

# Microsoft Teams
TEAMS_TENANT_ID=
TEAMS_CLIENT_ID=
TEAMS_CLIENT_SECRET=

# LLM Providers
OPENAI_API_KEY=
OPENAI_ORG_ID=
ANTHROPIC_API_KEY=
ANTHROPIC_ORG_ID=

# Default LLM for agents
DEFAULT_LLM_PROVIDER=openai
DEFAULT_LLM_MODEL=gpt-4-turbo-preview

# LLM Settings
OPENAI_TEMPERATURE=0.1
ANTHROPIC_TEMPERATURE=0.1
MAX_TOKENS=4096

# LangGraph
LANGGRAPH_CHECKPOINT_SQLITE=sqlite:///checkpoints.db
LANGGRAPH_CHECKPOINT_POSTGRES=postgresql://compliance:compliance@postgres:5432/compliance_copilot

# Celery
CELERY_BROKER_URL=redis://redis:6379/1
CELERY_RESULT_BACKEND=redis://redis:6379/2
CELERY_TASK_SERIALIZER=json
CELERY_RESULT_SERIALIZER=json
CELERY_ACCEPT_CONTENT=json
CELERY_TIMEZONE=UTC
CELERY_TASK_TRACK_STARTED=true
CELERY_TASK_TIME_LIMIT=3600

# Monitoring
PROMETHEUS_MULTIPROC_DIR=/tmp/prometheus_multiproc
PROMETHEUS_PORT=9090

# Grafana
GRAFANA_ADMIN_USER=admin
GRAFANA_ADMIN_PASSWORD=admin

# Logging
LOG_LEVEL=INFO
LOG_FORMAT=json
LOG_LEVEL_SQL=WARNING

# Email (for notifications)
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_USER=
SMTP_PASSWORD=
SMTP_FROM=noreply@compliance-copilot.io

# Sentry
SENTRY_DSN=
SENTRY_TRACES_SAMPLE_RATE=0.1

# Feature Flags
FEATURE_EVIDENCE_COLLECTION=true
FEATURE_POLICY_GENERATION=true
FEATURE_RISK_ASSESSMENT=true
FEATURE_AUDIT_PACKAGING=true
FEATURE_INTEGRATIONS=true
FEATURE_AI_AGENTS=true

# Rate Limiting
RATE_LIMIT_REQUESTS=100
RATE_LIMIT_WINDOW=60

# File Storage
FILE_STORAGE_TYPE=local  # local, s3, gcs, azure
FILE_STORAGE_PATH=/app/uploads
AWS_S3_BUCKET=
GCS_BUCKET=
AZURE_STORAGE_CONTAINER=

# Backup
BACKUP_SCHEDULE=0 2 * * *
BACKUP_RETENTION_DAYS=30
BACKUP_S3_BUCKET=

# Email Templates
EMAIL_TEMPLATES_PATH=/app/templates/email

# Compliance Frameworks
DEFAULT_FRAMEWORKS=SOC2,ISO27001,NIST_CSF,GDPR,HIPAA,PCI_DSS

# Default Risk Thresholds
RISK_THRESHOLD_CRITICAL=9.0
RISK_THRESHOLD_HIGH=7.0
RISK_THRESHOLD_MEDIUM=4.0
RISK_THRESHOLD_LOW=0.1

# Evidence Collection
EVIDENCE_COLLECTION_INTERVAL_HOURS=24
EVIDENCE_RETENTION_DAYS=730
EVIDENCE_MAX_FILE_SIZE_MB=100

# Policy Generation
POLICY_TEMPLATES_PATH=/app/templates/policies
DEFAULT_POLICY_LANGUAGE=en

# Audit Packaging
AUDIT_PACKAGE_FORMAT=zip
AUDIT_PACKAGE_ENCRYPTION=true

# Integration Settings
INTEGRATION_SYNC_INTERVAL_HOURS=6
INTEGRATION_MAX_RETRIES=3
INTEGRATION_TIMEOUT_SECONDS=300

# Rate Limits per Integration
AWS_RATE_LIMIT=1000
GCP_RATE_LIMIT=1000
AZURE_RATE_LIMIT=1000
GITHUB_RATE_LIMIT=5000
GITLAB_RATE_LIMIT=5000
OKTA_RATE_LIMIT=1000

# Monitoring
HEALTH_CHECK_INTERVAL=30
METRICS_RETENTION_DAYS=30

# Backup & DR
BACKUP_ENCRYPTION_KEY=
DISASTER_RECOVERY_REGION=us-west-2

# Feature Flags
ENABLE_EVIDENCE_COLLECTION=true
ENABLE_CONTROL_MAPPING=true
ENABLE_GAP_ANALYSIS=true
ENABLE_POLICY_GENERATION=true
ENABLE_RISK_ASSESSMENT=true
ENABLE_AUDIT_PACKAGING=true
ENABLE_INTEGRATION_ORCHESTRATION=true
ENABLE_AI_AGENTS=true