.env.example

# .env.example
# Copy this file to .env and modify as needed.
# These variables are used by docker-compose.yml for local development.

# --- General Configuration ---
# The Docker image tag used by both API and Web containers.
# Standard deployment aliases:
# - test: auto-updated test environment
# - stable: manually promoted production environment
# - sha-<shortsha>: immutable rollback target
TAG=test
# The container name for the API service
CONTAINER_NAME=f1-local

# --- Network Configuration ---
# The host port for the F1.Api service
HOST_PORT=5000
# The host port for the F1.Web Blazor app
HOST_PORT_WEB=5001
# CORS: Comma-separated list of allowed origins
ALLOWED_ORIGINS=http://localhost:80,http://localhost:5000,http://localhost:5001

# --- Blazor App Configuration ---
# The environment for the Blazor application (Development/Production).
# This controls debugging features and the Blazor-Environment header.
BLAZOR_ENVIRONMENT=Development

# The base URL for the API, injected into the Blazor app at runtime.
# This should point to where the F1.Api is accessible from the browser.
API_BASE_URL=http://localhost:5000/

# --- API Configuration ---
# Postgres connection details used by the API container.
# Required.
# Defaults below are for local/dev only. Override in test/prod host .env files.
POSTGRES_DB=f1competition
POSTGRES_USER=f1
POSTGRES_PASSWORD=f1
POSTGRES_PORT=5432
# When true, API applies EF migrations and seed data on startup.
DB_AUTO_MIGRATE=true

# Worker data sync schedule and ingestion policy.
# Use >0 for long-running scheduled sync in container environments.
# Note: These DATA_SYNC_* values are mapped in docker-compose.yml to DataSyncWorker__* env vars.
DATA_SYNC_INTERVAL_MINUTES=60
DATA_SYNC_AUTO_MIGRATE=false
DATA_SYNC_HTTP_RETRY_COUNT=3
DATA_SYNC_HTTP_RETRY_DELAY_MS=750
DATA_SYNC_DEADLINE_MINUTES_BEFORE_START=30
DATA_SYNC_JOLPICA_BASE_URL=https://api.jolpi.ca/ergast/f1/
DATA_SYNC_CONTINUE_ON_ERROR=false

# Cloudflare Access audience (aud claim) expected by JWT validation.
# Required.
CLOUDFLARE_AUDIENCE=

# Cloudflare claim type that carries group membership and the admin groups that grant Admin role.
ADMIN_GROUP_CLAIM_TYPE=groups
ADMIN_GROUPS=F1 Admins
# Optional comma-separated email allowlist that also grants Admin role.
ADMIN_EMAILS=

# Test-only service token fallback for CI Selenium when JWT lacks email claim.
# Keep disabled by default and use strict subject allowlists.
CLOUDFLARE_ENABLE_TEST_SERVICE_TOKEN_FALLBACK=false
CLOUDFLARE_TEST_SERVICE_TOKEN_SUBJECT_ALLOWLIST=
CLOUDFLARE_TEST_SERVICE_TOKEN_ADMIN_SUBJECT_ALLOWLIST=
CLOUDFLARE_TEST_SERVICE_TOKEN_EMAIL_DOMAIN=test.local

# --- Logging ---
# Host path inside the LXC where API log files will be stored.
# Recommended: bind-mount a RAID-backed Proxmox dataset to /mnt/f1-logs and point HOST_LOG_PATH there.
HOST_LOG_PATH=/mnt/f1-logs

# Development-only mock identity used when the API simulates Cloudflare locally.
DEV_MOCK_EMAIL=dev-user@example.com
DEV_MOCK_GROUPS=F1 Admins,F1 Users
DEV_ENABLE_DEBUG_ENDPOINTS=false

# --- Optional Local E2E Runner Configuration (Story #82) ---
# These are only used when manually running tests/F1.E2E.Tests.
E2E_BASE_URL=
E2E_API_BASE_URL=
E2E_CF_CLIENT_ID=
E2E_CF_CLIENT_SECRET=
E2E_RACE_ID=2025-24-yas_marina
E2E_TIMEOUT_SECONDS=20
E2E_HEADLESS=true
# Optional override for always-on Selenium step trace logs.
# Defaults to TestResults/e2e/step-traces when unset.
E2E_STEP_TRACE_PATH=

# --- Cloudflare Tunnel (Optional) ---
# Used for the 'cloud' profile to expose the service publicly.
# TUNNEL_TOKEN=