# HPThreat MCP Server - Environment Variables
# Copy this file to .env and fill in your values.

# AbuseIPDB API key (free tier at https://www.abuseipdb.com/register)
# Without this, IP reputation lookups return mock data.
ABUSEIPDB_API_KEY=

# Force simulation mode even when Docker is available (true/false)
# Useful for testing without Docker or running in demo environments.
HONEYPOT_SIMULATION=false

# Threat feed cache TTL in seconds (default: 3600 = 1 hour)
CACHE_TTL_SECONDS=3600

# Log retention window in hours for correlate_ttps (default: 168 = 7 days)
LOG_RETENTION_HOURS=168