.env.example

# PyPaaS Local Development Configuration
# Copy this to .env and fill in your values
# ⚠️ SECURITY: Never commit .env to version control

# ============================================================================
# DEPLOYMENT MODE
# ============================================================================
# Current version supports local deployment only
# AWS deployment support is planned for future releases
DEPLOYMENT_MODE=local

# ============================================================================
# APPLICATION CONFIGURATION
# ============================================================================
# FastAPI server port
APP_PORT=8080

# ============================================================================
# DATABASE CONFIGURATION
# ============================================================================
# PostgreSQL connection details
POSTGRES_USER=pypaas_user
POSTGRES_PASSWORD=change_me_to_secure_password
POSTGRES_DB=pypaas
POSTGRES_HOST=db
POSTGRES_PORT=5432

# Full PostgreSQL connection string (auto-generated from above)
DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}

# Database connection pool settings
DB_POOL_SIZE=5              # Number of connections to maintain
DB_MAX_OVERFLOW=10          # Max additional connections
DB_POOL_TIMEOUT=30          # Seconds to wait for connection
DB_POOL_RECYCLE=3600        # Recycle connections after N seconds

# ============================================================================
# API AUTHENTICATION & SECURITY
# ============================================================================
# API key for webhook and management endpoints
# Generate with: python -c "import secrets; print(secrets.token_urlsafe(32))"
API_KEY=change_me_to_a_secure_api_key

# GitHub webhook secret (must match GitHub webhook configuration)
# Generate with: python -c "import secrets; print(secrets.token_hex(32))"
GITHUB_WEBHOOK_SECRET=change_me_to_a_secure_webhook_secret

# JWT secret for token-based authentication (optional)
# Generate with: python -c "import secrets; print(secrets.token_urlsafe(32))"
JWT_SECRET=change_me_to_a_secure_jwt_secret

# ============================================================================
# SELF-HEALING CONFIGURATION
# ============================================================================
# Enable/disable the self-healing daemon
ENABLE_HEALER=true

# Healer check interval in seconds (how often to check container health)
HEALER_INTERVAL=30

# ============================================================================
# LOGGING CONFIGURATION
# ============================================================================
# Log level: DEBUG, INFO, WARNING, ERROR, CRITICAL
LOG_LEVEL=INFO

# ============================================================================
# CORS CONFIGURATION
# ============================================================================
# Comma-separated list of allowed origins for CORS
ALLOWED_ORIGINS=http://localhost:8080,http://localhost:3000

# ============================================================================
# RATE LIMITING
# ============================================================================
# Rate limit for webhook endpoint (requests per minute)
WEBHOOK_RATE_LIMIT=10

# Rate limit window in seconds
RATE_LIMIT_WINDOW=60

# ============================================================================
# HEALTH CHECK CONFIGURATION
# ============================================================================
# Container health check timeout in seconds
HEALTH_CHECK_TIMEOUT=30

# Health check interval in seconds
HEALTH_CHECK_INTERVAL=2

# ============================================================================
# NGINX CONFIGURATION
# ============================================================================
# Nginx configuration paths (for local Docker setup)
NGINX_CONFIG_PATH=/etc/nginx/sites-available
NGINX_ENABLED_PATH=/etc/nginx/sites-enabled

# ============================================================================
# DOCKER REGISTRY (Optional)
# ============================================================================
# Private Docker registry configuration (leave empty for Docker Hub)
DOCKER_REGISTRY_URL=
DOCKER_REGISTRY_USERNAME=
DOCKER_REGISTRY_PASSWORD=

# ============================================================================
# DEVELOPMENT / TESTING
# ============================================================================
# Run integration tests (set to 1 to enable)
# RUN_INTEGRATION=0

# Test database URL (for running tests)
# TEST_DATABASE_URL=postgresql://test_user:test_password@db:5432/test_pypaas