.env.example

# ==============================================================================
# Chive Backend Environment Configuration
# ==============================================================================
# Copy this file to .env for local development:
#   cp .env.example .env
#
# Default values work with docker-compose.local.yml databases.
# ==============================================================================

# Server
PORT=3001
NODE_ENV=development
LOG_LEVEL=info

# Database Configuration
# These values match docker-compose.local.yml defaults
POSTGRES_HOST=127.0.0.1
POSTGRES_PORT=5432
POSTGRES_DB=chive
POSTGRES_USER=chive
POSTGRES_PASSWORD=chive_test_password
DATABASE_URL=postgresql://chive:chive_test_password@127.0.0.1:5432/chive

REDIS_URL=redis://127.0.0.1:6379
ELASTICSEARCH_URL=http://127.0.0.1:9200

NEO4J_URI=bolt://127.0.0.1:7687
NEO4J_USER=neo4j
NEO4J_PASSWORD=chive_test_password

# ATProto Configuration
ATPROTO_RELAY_URL=wss://bsky.network
ATPROTO_PDS_URL=https://bsky.social
GRAPH_PDS_DID=did:plc:chive-governance

# CORS Configuration
# The API automatically allows localhost/127.0.0.1 variants.
# Add additional origins here (comma-separated) for tunnel URLs.
CORS_ORIGINS=

# Security (development only - DO NOT use in production)
# Production validates that secrets don't contain "not-for-production"
JWT_SECRET=local-dev-jwt-secret-not-for-production
SESSION_SECRET=local-dev-session-secret-not-for-production

# External Services (optional)
ORCID_CLIENT_ID=
ORCID_CLIENT_SECRET=
# ORCID base URL: use https://sandbox.orcid.org for testing, https://orcid.org for production
ORCID_BASE_URL=https://orcid.org
# Override the OAuth callback URI (defaults to {API_BASE_URL}/api/v1/auth/orcid/callback)
ORCID_REDIRECT_URI=
DOI_REGISTRATION_ENDPOINT=

# Observability (optional)
# OTEL_EXPORTER_OTLP_ENDPOINT=http://127.0.0.1:4318
# OTEL_SERVICE_NAME=chive-api

# Bluesky Posting (for scripts/bluesky-post.ts)
# CHIVE_PDS_URL=https://bsky.social
# CHIVE_HANDLE=chive.pub
# CHIVE_APP_PASSWORD=