# ──────────────────────────────────────────────
# Credence Backend – Environment Variables
# Copy this file:  cp .env.example .env
# ──────────────────────────────────────────────

# --- App ---
NODE_ENV=development
PORT=3000

# --- PostgreSQL ---
POSTGRES_USER=credence
POSTGRES_PASSWORD=credence
POSTGRES_DB=credence
POSTGRES_PORT=5432

# Composed automatically in docker-compose; override for non-Docker use:
# DATABASE_URL=postgres://credence:credence@localhost:5432/credence

# --- Redis ---
REDIS_PORT=6379
# REDIS_URL=redis://localhost:6379
# Exactly 32 characters for AES-256-GCM
EVIDENCE_ENCRYPTION_KEY="12345678901234567890123456789012"
# =============================================================================
# Credence Backend – Environment Variables
# =============================================================================
# Copy this file to .env and fill in the values for local development.
#   cp .env.example .env
# =============================================================================

# ── Server ───────────────────────────────────────────────────────────────────
PORT=3000
NODE_ENV=development
LOG_LEVEL=info

# ── Database ─────────────────────────────────────────────────────────────────
DB_URL=postgresql://user:password@localhost:5432/credence

# ── Database Pool Tuning ─────────────────────────────────────────────────────
# Maximum connections in the API pool (default: 20)
DB_POOL_MAX=20
# Milliseconds a client can sit idle before being closed (default: 30000)
DB_POOL_IDLE_TIMEOUT_MS=30000
# Milliseconds to wait for a connection before erroring (default: 5000)
DB_POOL_CONNECTION_TIMEOUT_MS=5000
# Default per-statement timeout in milliseconds; kills runaway queries (default: 30000)
DB_STATEMENT_TIMEOUT_MS=30000
# Maximum connections in the worker pool for background jobs (default: 5)
DB_WORKER_POOL_MAX=5

# ── Redis ────────────────────────────────────────────────────────────────────
REDIS_URL=redis://localhost:6379

# ── Authentication ───────────────────────────────────────────────────────────
# Must be at least 32 characters
JWT_SECRET=change-me-to-a-secure-random-string-at-least-32-chars
JWT_EXPIRY=1h

# ── JWT Key Rotation ─────────────────────────────────────────────────────────
# How often (seconds) to rotate the active signing key. Default: 86400 (24 h).
KEY_ROTATION_INTERVAL_SECONDS=86400
# How long (seconds) a retired key stays valid for JWT verification after
# rotation, allowing tokens signed before the rotation to remain verifiable.
# Default: 3600 (1 h).
KEY_GRACE_PERIOD_SECONDS=3600
# Clock skew tolerance (seconds). Added to the grace window before a retired
# key is hard-pruned, and passed as clockTolerance to jwtVerify() so tokens
# from slightly-fast issuer clocks are still accepted. Default: 300 (5 min).
KEY_CLOCK_SKEW_SECONDS=300
#
# Optional: pre-load a PKCS8 PEM-encoded RSA private key as the initial signing key.
# When set, the server imports this key on startup instead of generating a new one,
# ensuring tokens remain valid across restarts. The rotation scheduler still applies.
# Generate with: openssl genrsa 2048 | openssl pkcs8 -topk8 -nocrypt
# In production, inject this via your secret manager (Vault, AWS Secrets Manager, etc.)
# KEY_PRIVATE_PEM="-----BEGIN PRIVATE KEY-----\nMII...\n-----END PRIVATE KEY-----"
#
# Optional stable kid for the key loaded from KEY_PRIVATE_PEM. Defaults to a random UUID.
# KEY_INITIAL_KID=my-key-v1

# ── Feature Flags ────────────────────────────────────────────────────────────
ENABLE_TRUST_SCORING=false
ENABLE_BOND_EVENTS=false

# ── Outbox Pattern ───────────────────────────────────────────────────────────
OUTBOX_ENABLED=true
OUTBOX_POLL_INTERVAL_MS=1000
OUTBOX_BATCH_SIZE=100
OUTBOX_PUBLISHED_RETENTION_DAYS=7
OUTBOX_FAILED_RETENTION_DAYS=30
OUTBOX_CLEANUP_INTERVAL_MS=3600000

# ── Report Storage ────────────────────────────────────────────────────────────
# Signing secret for HMAC-signed report artifact download URLs.
# Must be non-empty; recommended length ≥ 32 characters.
REPORT_STORAGE_SIGNING_SECRET=change-me-report-storage-signing-32char
# Base URL for report artifact downloads (used in signed URL construction).
# Default: https://credence.example.com
# REPORT_DOWNLOAD_BASE_URL=https://credence.example.com

# ── Horizon (optional) ──────────────────────────────────────────────────────
# HORIZON_URL=https://horizon-testnet.stellar.org

# ── CORS ─────────────────────────────────────────────────────────────────────
CORS_ORIGIN=*

# ── Database Lock Timeouts (milliseconds) ────────────────────────────────────
# Timeout for read-only queries with minimal contention tolerance
DB_LOCK_TIMEOUT_READONLY=2000
# Timeout for standard read-modify-write operations
DB_LOCK_TIMEOUT_DEFAULT=5000
# Timeout for critical flows requiring extended wait
DB_LOCK_TIMEOUT_CRITICAL=10000

# ── Analytics Materialized View Refresh ──────────────────────────────────────
ANALYTICS_REFRESH_CRON=*/5 * * * *
ANALYTICS_STALENESS_SECONDS=300

# ── Compression ──────────────────────────────────────────────────────────────
# Minimum response size (in bytes) to trigger compression. Default: 1024 (1 KB).
COMPRESSION_THRESHOLD=1024

# ── Reputation Scoring Model ─────────────────────────────────────────────────
# Version identifier for the scoring model (recorded in score snapshots)
REPUTATION_MODEL_VERSION=1.0.0
# Maximum points for bond amount component (default: 50, achieved at ≥ 1 ETH)
REPUTATION_BOND_SCORE_MAX=50
# Maximum points for bond duration component (default: 20, achieved at ≥ 365 days)
REPUTATION_DURATION_SCORE_MAX=20
# Maximum points for attestation component (default: 30, achieved at ≥ 5 attestations)
REPUTATION_ATTESTATION_SCORE_MAX=30
# 1 ETH in wei (default: 1000000000000000000)
REPUTATION_ONE_ETH_WEI=1000000000000000000
# Maximum duration in days for full duration score (default: 365)
REPUTATION_MAX_DURATION_DAYS=365
# Maximum attestation count for full attestation score (default: 5)
REPUTATION_MAX_ATTESTATION_COUNT=5