sample.env

# Local devcontainer only. Deployed dev/prod read secrets from Terraform-managed
# Key Vault and never load this file.

# Values below must match the hardcoded dev connection string in
# api/src/EA.Api/appsettings.Development.json (postgres/password/postgres for DB,
# guest/guest for RabbitMQ). Changing them here without updating that file will
# break local `dotnet run` against the devcontainer DB / broker.

# postgres
POSTGRES_USER=
POSTGRES_PASSWORD=
POSTGRES_DB=

# pgadmin
PGADMIN_DEFAULT_EMAIL=
PGADMIN_DEFAULT_PASSWORD=
PGADMIN_CONFIG_SERVER_MODE=
PGADMIN_CONFIG_MASTER_PASSWORD_REQUIRED=

# rabbitmq
RABBITMQ_USER=
RABBITMQ_PASSWORD=

# UI production build — set to the deployed API URL (e.g. https://<api-fqdn>).
# Consumed by ui/scripts/generate-environment.mjs via `npm run build:prod`.
# Leave empty for local dev (dev builds use environment.development.ts).
API_URL=

# observability (optional)
# In deployed envs, Terraform injects this as a secret env var on each Container
# App — this local .env plays no role there.
# For local dev this is OPTIONAL: leave empty and the .NET API + Python
# data-engine guard on its absence (no telemetry export, stdout logging
# continues unchanged).
# To test telemetry locally against a scratch App Insights resource, paste its
# full connection string (InstrumentationKey=...;IngestionEndpoint=...;...).
# See docs/runbooks/observability.md for guidance.
APPLICATIONINSIGHTS_CONNECTION_STRING=