example.env

# townsquare configuration — copy to .env and fill in.

HOST=0.0.0.0
PORT=8000
RUNTIME_ENV=dev

# Generate with: townsquare gen-secrets
SECRET_KEY=
FERNET_KEY=

DB_URL=postgresql+psycopg://townsquare:townsquare@localhost:5432/townsquare

# Google Workspace SSO
# 1. Create OAuth client at console.cloud.google.com → Credentials
# 2. Authorized redirect URI: <your-host>/auth/google/callback
# 3. OAuth consent screen User Type = INTERNAL
#    so only your-domain users can authenticate (no Google verification needed).
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
WORKSPACE_DOMAIN=example.com
GOOGLE_REDIRECT_URI=http://localhost:8000/auth/google/callback

LLM_PROVIDER=anthropic
ANTHROPIC_API_KEY=
ANTHROPIC_MODEL=claude-sonnet-4-6

# Slack — per-user OAuth (xoxp tokens, NOT bot tokens).
# 1. Create app at api.slack.com/apps → From scratch
# 2. OAuth & Permissions → User Token Scopes: search:read, users:read, users:read.email
# 3. Redirect URL: <your-host>/connections/slack/callback
# 4. Install to workspace → copy "Client ID" + "Client Secret" below
SLACK_CLIENT_ID=
SLACK_CLIENT_SECRET=

# GitHub — uses fine-grained PATs (no OAuth client secrets needed in v0.1).
# Each user generates their own PAT at github.com/settings/tokens.

# Notion — coming in v0.2
NOTION_CLIENT_ID=
NOTION_CLIENT_SECRET=

PER_USER_QUERY_BUDGET_USD_DAILY=5.0
PER_QUERY_TOKEN_CAP=50000

LOG_LEVEL=INFO
ENABLE_AUDIT_LOG=true