.env.example

# =============================================================================
# SRS — Environment Variable Reference
# =============================================================================
# Copy this file to .env and fill in real values before running the app.
# NEVER commit a populated .env to version control.
#
# Variables marked (required) have no default and MUST be set.
# Variables marked (optional) have a sensible default shown after the =.
# =============================================================================

# ---- Application runtime ----------------------------------------------------
ENV=development           # development | staging | production
DEBUG=true                # false in production
LOG_LEVEL=INFO            # DEBUG | INFO | WARNING | ERROR | CRITICAL

# ---- Security (required) ----------------------------------------------------
# Generate with: python -c "import secrets; print(secrets.token_hex(32))"
SECRET_KEY=               # (required) min 32-character random hex string

ACCESS_TOKEN_EXPIRE_MINUTES=60

# Refresh tokens let a client get a new access token without re-logging in.
# POST /auth/refresh rotates them (old one revoked, new one issued); see
# POST /auth/logout to revoke one early.
REFRESH_TOKEN_EXPIRE_DAYS=30

# ---- Database (required) ----------------------------------------------------
# Development — SQLite, no server needed
DATABASE_URL=sqlite:///./support.db

# Production — PostgreSQL (uncomment and fill in)
# DATABASE_URL=postgresql://srs_user:CHANGE_ME@localhost:5432/srs_db?sslmode=require

# Docker Compose DB credentials (used by docker-compose.yml)
# Generate with: python -c "import secrets; print(secrets.token_urlsafe(24))"
POSTGRES_DB=srs_db
POSTGRES_USER=srs_user
POSTGRES_PASSWORD=        # (required for Docker) strong random password

# ---- AI (required for LLM features) ----------------------------------------
AI_PROVIDER=openai
OPENAI_API_KEY=           # (required) sk-...
OPENAI_MODEL=gpt-4o-mini

# Decision engine — tickets below this confidence score are escalated
CONFIDENCE_THRESHOLD_AUTO_RESOLVE=0.75

# ---- Email / OTP ------------------------------------------------------------
RESEND_API_KEY=           # (required for OTP emails) re_...

# ---- Redis (optional) -------------------------------------------------------
# Leave blank to disable caching; the app runs fine without Redis
REDIS_URL=

# ---- Rate limiting (optional overrides) ------------------------------------
AUTH_RATE_LIMIT_LOGIN=10/minute
AUTH_RATE_LIMIT_FORGOT_PASSWORD=5/minute

# ---- Error tracking (optional) ----------------------------------------------
SENTRY_DSN=