.env.example

# Example .env file for btp-universal-terraform
# Copy this file to .env and fill in your actual values
# DO NOT commit the .env file with real secrets!

# AWS Credentials (required for AWS mode)
AWS_ACCESS_KEY_ID=your-aws-access-key-id
AWS_SECRET_ACCESS_KEY=your-aws-secret-access-key
AWS_REGION=eu-central-1

# GCP Credentials (required for GCP mode)
# Service account JSON content (paste the entire JSON from the downloaded key file)
GOOGLE_CLOUD_KEYFILE_JSON='{"type":"service_account","project_id":"your-project","private_key_id":"...","private_key":"...","client_email":"...","client_id":"...","auth_uri":"...","token_uri":"...","auth_provider_x509_cert_url":"...","client_x509_cert_url":"..."}'
GOOGLE_PROJECT=your-gcp-project-id
GOOGLE_REGION=us-central1

# Terraform variables for dependency credentials (REQUIRED)
TF_VAR_postgres_password=your-postgres-password-min-8-chars
TF_VAR_redis_password=your-redis-password-min-16-chars
TF_VAR_object_storage_access_key=your-minio-access-key
TF_VAR_object_storage_secret_key=your-minio-secret-key-min-20-chars
TF_VAR_grafana_admin_password=your-grafana-password-min-12-chars
TF_VAR_oauth_admin_password=your-keycloak-password-min-16-chars

# Terraform variables for license (required for Helm chart deployment)
TF_VAR_license_username=your-license-username
TF_VAR_license_password=your-license-password
TF_VAR_license_signature=your-license-signature
TF_VAR_license_email=your-email@example.com
TF_VAR_license_expiration_date=2025-12-31

# Terraform variables for platform secrets
TF_VAR_jwt_signing_key=your-jwt-signing-key-min-32-chars
TF_VAR_ipfs_cluster_secret=your-64-char-hex-string-for-ipfs-cluster
TF_VAR_state_encryption_key=your-state-encryption-key-min-32-chars

# AWS credentials for deployment engine (reuse the same AWS creds)
TF_VAR_aws_access_key_id=your-aws-access-key-id
TF_VAR_aws_secret_access_key=your-aws-secret-access-key

# Google OAuth (optional - for AWS + Google auth setup)
# TF_VAR_google_oauth_client_id=your-google-oauth-client-id
# TF_VAR_google_oauth_client_secret=your-google-oauth-client-secret