# =========================================================
# BreakPilot Compliance — Environment Variables
# =========================================================
# Copy to .env and adjust values
# NOTE: Core must be running! These vars reference Core services.

# Compliance SDK Database (externe PostgreSQL — nie committen!)
# Setzt DATABASE_URL fuer: backend-compliance, ai-compliance-sdk, document-crawler, admin-compliance
COMPLIANCE_DATABASE_URL=postgresql://<user>:<pass>@<host>:<port>/<db>?sslmode=require

# Legacy Core Database (nur noch fuer Rollback; wird ignoriert wenn COMPLIANCE_DATABASE_URL gesetzt)
POSTGRES_USER=breakpilot
POSTGRES_PASSWORD=breakpilot123
POSTGRES_DB=breakpilot_db

# Security
JWT_SECRET=your-super-secret-jwt-key-change-in-production

# Environment
ENVIRONMENT=development
TZ=Europe/Berlin

# LLM Configuration
COMPLIANCE_LLM_PROVIDER=ollama
SELF_HOSTED_LLM_URL=http://host.docker.internal:11434
SELF_HOSTED_LLM_MODEL=llama3.2
COMPLIANCE_LLM_MAX_TOKENS=4096
COMPLIANCE_LLM_TEMPERATURE=0.3
COMPLIANCE_LLM_TIMEOUT=120

# Anthropic (optional fallback)
ANTHROPIC_API_KEY=
ANTHROPIC_DEFAULT_MODEL=claude-sonnet-4-5-20250929

# SDK
PII_REDACTION_ENABLED=true
PII_REDACTION_LEVEL=standard
AUDIT_RETENTION_DAYS=365
AUDIT_LOG_PROMPTS=true

# Frontend URLs
NEXT_PUBLIC_API_URL=https://macmini:8002
NEXT_PUBLIC_SDK_URL=https://macmini:8093

# Session
SESSION_TTL_HOURS=24

# SMTP (uses Core Mailpit)
SMTP_HOST=bp-core-mailpit
SMTP_PORT=1025

# Qdrant (externe Instanz — Hetzner/meghshakka)
QDRANT_URL=https://qdrant-dev.breakpilot.ai
QDRANT_API_KEY=<api-key>

# MinIO / Object Storage (Hetzner Object Storage)
# MINIO_ENDPOINT, MINIO_ACCESS_KEY, MINIO_SECRET_KEY sind direkt in docker-compose hart kodiert
# (compliance-tts-service: nbg1.your-objectstorage.com)
