.env.example

# Biometric DID Production Environment Configuration
# Copy this file to .env and fill in the values

# API Security (REQUIRED)
# Generate with: python3 -c "import secrets; print(secrets.token_urlsafe(32))"
API_SECRET_KEY=CHANGE_ME_GENERATE_RANDOM_32_BYTE_KEY
JWT_SECRET_KEY=CHANGE_ME_GENERATE_RANDOM_32_BYTE_KEY

# JWT Configuration
JWT_EXPIRATION_HOURS=24

# CORS Configuration (REQUIRED)
# Comma-separated list of allowed origins
CORS_ORIGINS=https://biometric-did.example.com,https://www.biometric-did.example.com

# Domain Configuration (REQUIRED for production)
DOMAIN=biometric-did.example.com
API_URL=https://api.biometric-did.example.com

# Feature Flags
RATE_LIMIT_ENABLED=true
AUDIT_LOG_ENABLED=true
HTTPS_ONLY=false  # Set to true in production with valid SSL certificates

# Database Configuration (optional, for persistent storage)
# DB_HOST=postgres
# DB_PORT=5432
# DB_NAME=biometric_did
# DB_USER=app_user
# DB_PASSWORD=CHANGE_ME_GENERATE_SECURE_PASSWORD

# Monitoring Configuration (optional)
# PROMETHEUS_ENABLED=false
# GRAFANA_ADMIN_PASSWORD=CHANGE_ME_GENERATE_SECURE_PASSWORD

# Backup Configuration (optional)
# BACKUP_ENABLED=true
# BACKUP_RETENTION_DAYS=30
# BACKUP_S3_BUCKET=biometric-did-backups

# Cardano Configuration (REQUIRED for blockchain features)
# Koios public endpoint works by default, set a custom URL for self-hosted deployments
KOIOS_BASE_URL=https://api.koios.rest/api/v1
KOIOS_METADATA_LABEL=674
KOIOS_METADATA_BLOCK_LIMIT=1000
CARDANO_NETWORK=testnet  # Options: testnet, mainnet, preprod, preview