.env.example

# ============================================
# PIE Players Environment Configuration
# ============================================
# Copy this file to .env and fill in your values
# NEVER commit .env to version control!

# ============================================
# AWS Polly TTS Configuration
# ============================================
# Required for server-side Text-to-Speech with speech marks
# Get credentials from: https://console.aws.amazon.com/iam/
#
# Recommended: Create an IAM user with minimal permissions
# See: docs/aws-polly-iam-policy.json

AWS_REGION=us-east-1
AWS_ACCESS_KEY_ID=AKIA...
AWS_SECRET_ACCESS_KEY=wJalr...

# Optional: For temporary credentials (AWS SSO, assumed roles, MFA)
# If using long-term IAM user credentials, leave this commented out
# AWS_SESSION_TOKEN=FwoGZXIvYXdzE...

# ============================================
# Redis Caching (Optional)
# ============================================
# Caches TTS synthesis results for 24 hours
# Significantly reduces AWS Polly API costs (70-90% savings)
#
# Install Redis:
#   macOS:  brew install redis && brew services start redis
#   Ubuntu: sudo apt install redis-server && sudo systemctl start redis
#   Docker: docker run -d -p 6379:6379 redis:alpine

# REDIS_URL=redis://localhost:6379

# ============================================
# TTS API Configuration (Optional)
# ============================================
# Override the default TTS API endpoint
# Default: /api/tts

# TTS_API_ENDPOINT=/api/tts

# ============================================
# Development Settings (Optional)
# ============================================

# Enable verbose logging for TTS
# DEBUG=tts:*

# Polly voice for development
# POLLY_DEFAULT_VOICE=Joanna

# Polly engine (standard or neural)
# POLLY_ENGINE=neural

# ============================================
# Google Cloud TTS Configuration (Optional)
# ============================================
# Alternative to AWS Polly - Google Cloud Text-to-Speech
# Get API key from: https://console.cloud.google.com/apis/credentials
#
# Method 1: API Key (simpler, for testing)
# GOOGLE_API_KEY=AIzaSy...
#
# Method 2: Service Account (recommended for production)
# GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account.json
# GOOGLE_CLOUD_PROJECT=your-project-id

# ============================================
# Desmos Calculator API Configuration (Optional)
# ============================================
# Required for Desmos graphing calculator
# Get API key from: https://www.desmos.com/api/v1
#
# Free tier available without API key (limited features)
# Premium tier requires API key (full features)

# DESMOS_API_KEY=dcb0...

# ============================================
# SchoolCity TTS Configuration (Optional)
# ============================================
# Required only for /api/tts/sc demo route backed by
# @pie-players/tts-server-sc. See apps/section-demos/README.md.

# TTS_SCHOOLCITY_URL=https://tts.svcdev.schoolcity.com
# TTS_SCHOOLCITY_API_KEY=...
# TTS_SCHOOLCITY_ISS=pie-players

# Optional: comma-separated EXACT-origin allow-list for synthesized audio /
# speech-mark asset fetches. Leave unset in dev to use the default policy
# (allow TTS_SCHOOLCITY_URL's origin plus any host on the same registrable
# domain). Set this env var in production to switch to a strict exact-origin
# allow-list (fully auditable, rejects sibling subdomains on the same parent
# domain). Private/metadata hosts, non-http(s) schemes, and cross-origin
# redirects are always blocked regardless of this setting.
# TTS_SCHOOLCITY_ASSET_ORIGINS=https://tts.svcdev.schoolcity.com,https://tts-cdn.svcdev.schoolcity.com

# ============================================
# Tool Configuration (Optional)
# ============================================
# Control which tools are enabled in the section toolbar
# Comma-separated list of tool IDs
# Available: calculator,graph,periodicTable,protractor,lineReader,ruler

# ENABLED_TOOLS=calculator,graph,periodicTable,protractor,lineReader,ruler