.env.example

# Real-Time Document Intelligence & Compliance Engine
# Environment Configuration
# Version: 1.0
# Date: 2026-02-03

# =============================================================================
# DEPLOYMENT MODE
# =============================================================================
DEPLOYMENT_MODE=development  # development, staging, production, on-premise
ENVIRONMENT=local           # local, cloud, hybrid

# =============================================================================
# DATABASE CONFIGURATIONS
# =============================================================================

# PostgreSQL Configuration
POSTGRES_HOST=localhost
POSTGRES_PORT=5432
POSTGRES_DB=document_intelligence
POSTGRES_USER=docintell_user
POSTGRES_PASSWORD=dev_password_123
POSTGRES_MAX_CONNECTIONS=100
POSTGRES_POOL_SIZE=20
DATABASE_URL=postgresql://docintell_user:dev_password_123@localhost:5432/document_intelligence

# Neo4j Configuration
NEO4J_URI=bolt://localhost:7687
NEO4J_USER=neo4j
NEO4J_PASSWORD=dev_password_123
NEO4J_DATABASE=neo4j
NEO4J_MAX_CONNECTION_POOL_SIZE=50

# Redis Configuration
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=dev_password_123
REDIS_DB=0
REDIS_MAX_CONNECTIONS=50
REDIS_URL=redis://:dev_password_123@localhost:6379/0

# =============================================================================
# STORAGE CONFIGURATIONS
# =============================================================================

# S3/MinIO Configuration
STORAGE_BACKEND=minio           # s3, minio
S3_BUCKET_PREFIX=docintell
AWS_REGION=us-east-1
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_SESSION_TOKEN=
S3_KMS_KEY_ID=

# MinIO Configuration (On-premise)
MINIO_ENDPOINT=localhost:9000
MINIO_ROOT_USER=admin
MINIO_ROOT_PASSWORD=dev_password_123
MINIO_USE_SSL=false
MINIO_REGION=us-east-1

# =============================================================================
# VECTOR STORE CONFIGURATION
# =============================================================================

# Vector Store Backend
VECTOR_STORE_BACKEND=weaviate   # pinecone, weaviate

# Pinecone Configuration (Cloud)
PINECONE_API_KEY=
PINECONE_ENVIRONMENT=us-east1-gcp
PINECONE_INDEX_NAME=document-clauses

# Weaviate Configuration (On-premise)
WEAVIATE_URL=http://localhost:8080
WEAVIATE_API_KEY=
WEAVIATE_CLASS_NAME=DocumentClause

# =============================================================================
# EXTERNAL SERVICE CONFIGURATIONS
# =============================================================================

# AWS Textract (Cloud OCR)
AWS_TEXTRACT_ENABLED=true
AWS_TEXTRACT_REGION=us-east-1
TEXTRACT_MAX_PAGES=50
TEXTRACT_CONFIDENCE_THRESHOLD=0.8

# Alternative OCR Services
GOOGLE_VISION_ENABLED=false
GOOGLE_VISION_CREDENTIALS_PATH=
AZURE_FORM_RECOGNIZER_ENABLED=false
AZURE_FORM_RECOGNIZER_ENDPOINT=
AZURE_FORM_RECOGNIZER_KEY=

# Local OCR (Fallback)
TESSERACT_ENABLED=true
TESSERACT_PATH=/usr/bin/tesseract
TESSERACT_DATA_PATH=/usr/share/tesseract-ocr/4.00/tessdata

# =============================================================================
# ML/AI MODEL CONFIGURATIONS
# =============================================================================

# Hugging Face Models
HF_TOKEN=
HF_CACHE_DIR=/tmp/docintell/huggingface_cache
TRANSFORMERS_CACHE=/tmp/docintell/transformers_cache

# Document Classification Model
DOCUMENT_CLASSIFIER_MODEL=microsoft/layoutlmv3-base
DOCUMENT_CLASSIFIER_CACHE_SIZE=100

# Named Entity Recognition
NER_MODEL=dbmdz/bert-large-cased-finetuned-conll03-english
NER_CONFIDENCE_THRESHOLD=0.85
NER_BATCH_SIZE=32

# Clause Extraction
CLAUSE_EXTRACTION_MODEL=google/flan-t5-large
CLAUSE_EXTRACTION_MAX_LENGTH=512
CLAUSE_EXTRACTION_BATCH_SIZE=8

# Embeddings Model
EMBEDDING_MODEL=sentence-transformers/all-MiniLM-L6-v2
EMBEDDING_DIMENSION=384
EMBEDDING_BATCH_SIZE=64

# =============================================================================
# PROCESSING CONFIGURATIONS
# =============================================================================

# Celery Configuration
CELERY_BROKER_URL=redis://:dev_password_123@localhost:6379/0
CELERY_RESULT_BACKEND=redis://:dev_password_123@localhost:6379/0
CELERY_TASK_SERIALIZER=json
CELERY_RESULT_SERIALIZER=json
CELERY_ACCEPT_CONTENT=["json"]
CELERY_TIMEZONE=UTC
CELERY_ENABLE_UTC=true
CELERY_WORKER_CONCURRENCY=4
CELERY_WORKER_MAX_TASKS_PER_CHILD=1000

# Task Queue Settings
HIGH_PRIORITY_QUEUE=documents:queue:high
NORMAL_PRIORITY_QUEUE=documents:queue:normal
RETRY_QUEUE=documents:queue:retry
MAX_RETRIES=3
RETRY_DELAY=300  # 5 minutes
DEAD_LETTER_RETENTION=7  # days

# Processing Limits
MAX_FILE_SIZE_MB=100
MAX_PAGES_PER_DOCUMENT=500
MAX_CONCURRENT_UPLOADS=500
PROCESSING_TIMEOUT_SECONDS=1800  # 30 minutes
OCR_TIMEOUT_SECONDS=300  # 5 minutes per page

# =============================================================================
# SECURITY CONFIGURATIONS
# =============================================================================

# JWT Configuration
JWT_SECRET_KEY=your-super-secret-jwt-key-change-in-production
JWT_ALGORITHM=RS256
JWT_ACCESS_TOKEN_EXPIRE_MINUTES=15
JWT_REFRESH_TOKEN_EXPIRE_DAYS=7

# RSA Key Paths (required for RS256 in production)
# Generate with: openssl genrsa -out private.pem 2048
#                openssl rsa -in private.pem -pubout -out public.pem
JWT_RSA_PRIVATE_KEY_PATH=
JWT_RSA_PUBLIC_KEY_PATH=

# OAuth2 Configuration
OAUTH2_CLIENT_ID=
OAUTH2_CLIENT_SECRET=
OAUTH2_AUTHORIZATION_URL=
OAUTH2_TOKEN_URL=
OAUTH2_USERINFO_URL=

# API Security
API_RATE_LIMIT_PER_MINUTE=60
API_RATE_LIMIT_PER_HOUR=1000
API_RATE_LIMIT_PER_DAY=10000
CORS_ALLOWED_ORIGINS=["http://localhost:3000", "http://localhost:8080"]

# Encryption
ENCRYPTION_ALGORITHM=AES256
ENCRYPTION_KEY_ROTATION_DAYS=90
DATA_RETENTION_DAYS=2555  # 7 years

# =============================================================================
# MONITORING AND LOGGING
# =============================================================================

# Logging Configuration
LOG_LEVEL=INFO
LOG_FORMAT=json
LOG_FILE_PATH=/app/logs/application.log
LOG_MAX_SIZE_MB=100
LOG_BACKUP_COUNT=10
ENABLE_STRUCTURED_LOGGING=true

# Metrics and Monitoring
ENABLE_PROMETHEUS_METRICS=true
PROMETHEUS_PORT=8000
HEALTH_CHECK_ENDPOINT=/health
METRICS_ENDPOINT=/metrics

# Alert Configuration
ENABLE_SLACK_ALERTS=false
SLACK_WEBHOOK_URL=
ENABLE_EMAIL_ALERTS=true
SMTP_HOST=localhost
SMTP_PORT=587
SMTP_USER=
SMTP_PASSWORD=
ALERT_EMAIL_FROM=alerts@docintell.local
ALERT_EMAIL_TO=admin@docintell.local

# Performance Monitoring
ENABLE_REQUEST_TRACING=true
TRACE_SAMPLING_RATE=0.1
APM_SERVICE_NAME=document-intelligence
APM_ENVIRONMENT=development

# =============================================================================
# FEATURE FLAGS
# =============================================================================

# Processing Features
ENABLE_DOCUMENT_SPLITTING=true
ENABLE_DIGITAL_PDF_DETECTION=true
ENABLE_MULTI_LANGUAGE_SUPPORT=true
ENABLE_ACTIVE_LEARNING=true
ENABLE_SYNTHETIC_DATA_GENERATION=false

# Compliance Features
ENABLE_GDPR_COMPLIANCE=true
ENABLE_HIPAA_COMPLIANCE=false
ENABLE_SOX_COMPLIANCE=false
ENABLE_DATA_ANONYMIZATION=true

# Integration Features
ENABLE_SALESFORCE_INTEGRATION=false
ENABLE_DOCUSIGN_INTEGRATION=false
ENABLE_SHAREPOINT_INTEGRATION=false
ENABLE_WEBHOOK_NOTIFICATIONS=true

# Experimental Features
ENABLE_GRAPH_NEURAL_NETWORKS=false
ENABLE_FEDERATED_LEARNING=false
ENABLE_QUANTUM_RESISTANCE=false

# =============================================================================
# DEVELOPMENT SETTINGS
# =============================================================================

# Development Mode Settings (only for local development)
DEBUG=true
ENABLE_DEBUG_TOOLBAR=true
ENABLE_QUERY_DEBUGGING=false
MOCK_EXTERNAL_SERVICES=false
ENABLE_SWAGGER_UI=true
ENABLE_REDOC=true

# Testing Configuration
ENABLE_INTEGRATION_TESTS=true
TEST_DATABASE_URL=postgresql://docintell_user:dev_password_123@localhost:5432/document_intelligence_test
TEST_REDIS_URL=redis://:dev_password_123@localhost:6379/1

# Sample Data
LOAD_SAMPLE_DATA=true
SAMPLE_DOCUMENTS_PATH=/app/sample_data/documents
SAMPLE_TEMPLATES_PATH=/app/sample_data/templates

# =============================================================================
# TENANT-SPECIFIC OVERRIDES
# =============================================================================

# Multi-tenant settings can be overridden per tenant
# Format: TENANT_{TENANT_ID}_{SETTING_NAME}=value
# Example: TENANT_acme_corp_MAX_MONTHLY_DOCUMENTS=50000