.env.example

# Core settings (have sensible defaults, override for production)
DATABASE_URL=postgresql+asyncpg://postgres:postgres@observal-db:5432/observal
# Recommended: generate a unique key for production
# python3 -c "import secrets; print(secrets.token_urlsafe(32))"
SECRET_KEY=change-me-to-a-random-string
CLICKHOUSE_URL=clickhouse://default:clickhouse@observal-clickhouse:8123/observal
REDIS_URL=redis://observal-redis:6379

# Postgres container credentials
POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres

# Optional: ClickHouse credentials
CLICKHOUSE_USER=default
CLICKHOUSE_PASSWORD=clickhouse

# Optional: Eval engine (LLM-as-judge)
EVAL_MODEL_URL=
EVAL_MODEL_API_KEY=
EVAL_MODEL_NAME=
EVAL_MODEL_PROVIDER=

# Moonshot / Kimi example (OpenAI-compatible). URL and Thinking-Mode toggle
# are handled automatically when PROVIDER=moonshot.
# EVAL_MODEL_PROVIDER=moonshot
# EVAL_MODEL_API_KEY=sk-...
# EVAL_MODEL_NAME=kimi-k2.5-preview

# Optional: AWS credentials for Bedrock eval engine
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_SESSION_TOKEN=
AWS_REGION=us-east-1

# Optional: OAuth / SSO (disabled when unset)
OAUTH_CLIENT_ID=
OAUTH_CLIENT_SECRET=
OAUTH_SERVER_METADATA_URL=

# Deployment mode: "local" (default) or "enterprise"
# Local mode: self-registration, bootstrap endpoint, built-in account creation
# Enterprise mode: SSO-only login, SCIM provisioning, no self-registration
DEPLOYMENT_MODE=local

# ClickHouse data retention (days). Set to 0 to disable TTL.
DATA_RETENTION_DAYS=90

# Demo accounts — seeded on first startup when no real users exist.
# Automatically cleaned up when a real super_admin is created.
# Set all 8 vars to enable, or leave unset to skip demo seeding.
DEMO_SUPER_ADMIN_EMAIL=super@demo.example
DEMO_SUPER_ADMIN_PASSWORD=super-changeme
DEMO_ADMIN_EMAIL=admin@demo.example
DEMO_ADMIN_PASSWORD=admin-changeme
DEMO_REVIEWER_EMAIL=reviewer@demo.example
DEMO_REVIEWER_PASSWORD=reviewer-changeme
DEMO_USER_EMAIL=user@demo.example
DEMO_USER_PASSWORD=user-changeme

# Resource limits (adjust based on your server's available RAM)
# CLICKHOUSE_MEMORY_LIMIT=2G
# OTEL_MEMORY_LIMIT=512M

# Host port mappings (change these if defaults conflict with other services)
# API_HOST_PORT=8000
# POSTGRES_HOST_PORT=5432
# CLICKHOUSE_HOST_PORT=8123
# REDIS_HOST_PORT=6379
# WEB_HOST_PORT=3000
# OTEL_GRPC_HOST_PORT=4317
# OTEL_HTTP_HOST_PORT=4318
# GRAFANA_HOST_PORT=3001

# Horizontal scaling (multi-instance deployments)
# API_REPLICAS=1
# WORKER_REPLICAS=1
# CLICKHOUSE_MEMORY_LIMIT=2G
# DB_POOL_SIZE=10
# DB_MAX_OVERFLOW=20
# REDIS_MAX_CONNECTIONS=50
# CLICKHOUSE_MAX_CONNECTIONS=20
# GIT_MIRROR_BASE_PATH=