.env.quickstart.example

# Openfuse — zero-edit env for the full Docker Compose quickstart.
#
#   cp .env.quickstart.example .env && docker compose up -d
#   # then open http://localhost:3000
#
# Every value below is a working DEV DEFAULT, so the stack boots with no edits.
# These secrets are INSECURE and PUBLIC — fine for trying Openfuse on a laptop,
# never for production or any network you do not control. For a real deployment,
# start from .env.prod.example and generate your own secrets.
#
# (For local `pnpm run dev` against docker-compose.dev.yml, use .env.dev.example
# instead — its hosts are localhost, not the Compose service names below.)

# --- Postgres (app/config data) ---
# Matches the bundled `postgres` service password default in docker-compose.yml.
DATABASE_URL="postgresql://postgres:postgres@postgres:5432/postgres"

# --- Auth & encryption (dev-only fixed values) ---
NEXTAUTH_URL="http://localhost:3000"
NEXTAUTH_SECRET="mysecret"        # prod: openssl rand -base64 32
SALT="mysalt"                     # prod: openssl rand -base64 32
# Must be 64 hex chars (256-bit). prod: openssl rand -hex 32
ENCRYPTION_KEY="0000000000000000000000000000000000000000000000000000000000000000"

# --- Redis (queues) ---
# Must match the bundled `redis` service password default in docker-compose.yml.
REDIS_AUTH="myredissecret"

# --- GreptimeDB (analytics event store) ---
# Hosts are the docker-compose service name. gRPC 4001 = writes, MySQL 4002 = reads + migrations.
# GreptimeDB auth is OFF here (no GREPTIME_PASSWORD) — fine for local eval, not for a shared host.
# To enforce auth, set GREPTIME_PASSWORD (see .env.prod.example).
GREPTIME_GRPC_URL="greptimedb:4001"
GREPTIME_SQL_HOST="greptimedb"
GREPTIME_SQL_PORT="4002"
GREPTIME_DB="openfuse"

# Object storage is OFF by default (ingestion needs no S3/MinIO); the Compose file
# already defaults media/event backends to a local volume. Nothing to set here.

# --- Auto-provision a demo project so you get API keys on first boot ---
# The web container creates this org/project/user at startup; log in with the email
# + password below, or point any Langfuse SDK at the keys directly. Dev-only values.
LANGFUSE_INIT_ORG_ID="demo-org"
LANGFUSE_INIT_ORG_NAME="Demo Org"
LANGFUSE_INIT_PROJECT_ID="demo-project"
LANGFUSE_INIT_PROJECT_NAME="Demo Project"
LANGFUSE_INIT_PROJECT_PUBLIC_KEY="pk-lf-1234567890"
LANGFUSE_INIT_PROJECT_SECRET_KEY="sk-lf-1234567890"
LANGFUSE_INIT_USER_EMAIL="demo@example.com"
LANGFUSE_INIT_USER_NAME="Demo User"
LANGFUSE_INIT_USER_PASSWORD="langfuse-dev"