# Production-safe local template. Replace blank values before startup; never commit .env.
NODE_ENV=production
SIMPROOF_DEPLOYMENT_MODE=loopback
SIMPROOF_HTTP_PORT=8080
SIMPROOF_ALLOWED_ORIGINS=http://127.0.0.1:8080
SIMPROOF_DATABASE_PATH=/var/lib/simproof/current/metadata.sqlite
SIMPROOF_ARTIFACT_ROOT=/var/lib/simproof/current/artifacts
SIMPROOF_DIAGNOSTIC_LOG_ROOT=/var/log/simproof
SIMPROOF_DIAGNOSTIC_LOG_MAX_BYTES=8388608
SIMPROOF_DIAGNOSTIC_LOG_FILES=3
SIMPROOF_ADMIN_BOOTSTRAP_SECRET=
SIMPROOF_SESSION_SECRET=
# Password-free UI testing uses compose.local-test.yaml. The production profile does
# not forward SIMPROOF_LOCAL_AUTH_BYPASS.
SIMPROOF_RUNNER_TOKEN=
SIMPROOF_RUNNER_VERSION=1.0.0

# `node scripts/prepare-deployment.mjs` writes the immutable runner image ID and
# Docker socket group as seen through the container mount to
# `.simproof/deployment.generated.env`.

# For network exposure, use an authenticated TLS reverse proxy and replace the two
# loopback settings above with `network` and one exact `https://` origin.

# Provider configuration is optional; bundled verified examples work without this
# entire group. Live generation requires every field below together. The two model
# fields pin the required Codex + GPT-5.6 models (Sol tier shown); uncomment the group
# and add your own keys to enable generation.
# OPENAI_API_KEY=
# CODEX_API_KEY=
# SIMPROOF_OPENAI_MODEL=gpt-5.6-sol
# SIMPROOF_CODEX_MODEL=gpt-5.6-sol
# SIMPROOF_OPENAI_INPUT_PRICE_MICROUSD_PER_MILLION=
# SIMPROOF_OPENAI_OUTPUT_PRICE_MICROUSD_PER_MILLION=
# SIMPROOF_CODEX_INPUT_PRICE_MICROUSD_PER_MILLION=
# SIMPROOF_CODEX_OUTPUT_PRICE_MICROUSD_PER_MILLION=
# SIMPROOF_CODEX_WORKSPACE_ROOT=/tmp/simproof-codex/workspaces
# SIMPROOF_CODEX_STATE_ROOT=/tmp/simproof-codex/state

SIMPROOF_SESSION_TTL_SECONDS=28800
SIMPROOF_SESSION_IDLE_SECONDS=3600
SIMPROOF_MAX_ACTIVE_SESSIONS=8
SIMPROOF_MAX_REQUEST_BYTES=65536
SIMPROOF_MAX_PROMPT_CHARACTERS=16384
SIMPROOF_PROMPT_RETENTION=discard

# The supported Compose topology forces both exporters off and does not forward
# endpoint or token fields. These settings are reserved for a separately reviewed
# non-Compose integration; changing them here does not enable export in Compose.
SIMPROOF_TELEMETRY_ENABLED=false
# SIMPROOF_TELEMETRY_ENDPOINT=https://telemetry.example.edu/intake
SIMPROOF_EXTERNAL_DIAGNOSTICS_ENABLED=false
# SIMPROOF_EXTERNAL_DIAGNOSTICS_ENDPOINT=https://diagnostics.example.edu/intake
# SIMPROOF_EXTERNAL_DIAGNOSTICS_TOKEN=