# ─────────────────────────────────────────────────────────────────────────────
# Veylant IA — Environment variables
# Copy this file to .env and fill in the values.
# All VEYLANT_* vars override the corresponding key in config.yaml.
# ─────────────────────────────────────────────────────────────────────────────

# ── Server ────────────────────────────────────────────────────────────────────
VEYLANT_SERVER_ENV=development
VEYLANT_SERVER_TENANT_NAME=My Organisation
VEYLANT_SERVER_ALLOWED_ORIGINS=http://localhost:3000

# ── Auth (JWT) ────────────────────────────────────────────────────────────────
# Generate: openssl rand -hex 32
VEYLANT_AUTH_JWT_SECRET=change-me-in-production
VEYLANT_AUTH_JWT_TTL_HOURS=24

# ── Database ──────────────────────────────────────────────────────────────────
VEYLANT_DATABASE_URL=postgres://veylant:veylant_dev@localhost:5432/veylant?sslmode=disable

# ── Redis ─────────────────────────────────────────────────────────────────────
VEYLANT_REDIS_URL=redis://localhost:6379

# ── ClickHouse ────────────────────────────────────────────────────────────────
VEYLANT_CLICKHOUSE_DSN=clickhouse://veylant:veylant_dev@localhost:9000/veylant_logs

# ── Cryptography ──────────────────────────────────────────────────────────────
# AES-256-GCM key for prompt encryption. Generate: openssl rand -base64 32
VEYLANT_CRYPTO_AES_KEY_BASE64=

# ── LLM Provider API Keys ─────────────────────────────────────────────────────
VEYLANT_PROVIDERS_OPENAI_API_KEY=sk-...
VEYLANT_PROVIDERS_ANTHROPIC_API_KEY=sk-ant-...
VEYLANT_PROVIDERS_MISTRAL_API_KEY=
VEYLANT_PROVIDERS_AZURE_API_KEY=
VEYLANT_PROVIDERS_AZURE_RESOURCE_NAME=
VEYLANT_PROVIDERS_AZURE_DEPLOYMENT_ID=

# ── SMTP (email notifications) ────────────────────────────────────────────────
VEYLANT_NOTIFICATIONS_SMTP_HOST=smtp.example.com
VEYLANT_NOTIFICATIONS_SMTP_PORT=587
VEYLANT_NOTIFICATIONS_SMTP_USERNAME=alerts@example.com
VEYLANT_NOTIFICATIONS_SMTP_PASSWORD=your-smtp-password
VEYLANT_NOTIFICATIONS_SMTP_FROM=noreply@example.com
VEYLANT_NOTIFICATIONS_SMTP_FROM_NAME=Veylant IA

# ── HashiCorp Vault (production only) ─────────────────────────────────────────
# VAULT_ADDR=https://vault.example.com
# VAULT_TOKEN=