.env.example

# ===========================================
# Weft Environment Configuration
# ===========================================
# Copy this to .env and customize for your setup
# This file is loaded by all weft binaries (weft-api, orchestrator, node_runner)

# ----- API Keys -----
# Uncomment and set the keys for the services you use.
# Nodes will show a clear error if the key is missing.

# OpenRouter API key for LLM nodes
# OPENROUTER_API_KEY=

# ElevenLabs API key for Speech-to-Text nodes
# ELEVENLABS_API_KEY=

# Tavily API key for Web Search nodes
# TAVILY_API_KEY=

# Apollo API key for Apollo Search/Enrich/Org Search nodes
# APOLLO_API_KEY=

# E2B sandbox API key for the Python code execution node
# E2B_API_KEY=

# Discord bot token (for Discord trigger/nodes)
# DISCORD_BOT_TOKEN=

# ----- Ports (optional, defaults shown) -----
# RESTATE_PORT=8080
# RESTATE_ADMIN_PORT=9070
# WEFT_API_PORT=3000

# ----- Database -----
# Auto-provisioned by dev.sh if not set (Docker required)
# DATABASE_URL=postgres://postgres:postgres@localhost:5433/weft_local

# ----- Logging -----
# RUST_LOG=info

# ----- Security: Credential Encryption -----
# AES-256-GCM key for encrypting trigger credentials in database
# Generate with: openssl rand -base64 32
# If not set, a development key is used (NOT SECURE FOR PRODUCTION)
# CREDENTIAL_ENCRYPTION_KEY=

# ----- Deployment Mode -----
# "local" = standalone mode (localhost origins, no token validation)
# "cloud" = cloud deployment (explicit ALLOWED_ORIGINS, token validation)
DEPLOYMENT_MODE=local

# ----- Infrastructure Target -----
# "local" = provision sidecar pods into the local kind cluster and use
# kubectl port-forward to reach them from the host. Required for local
# development of any infra-using node (Postgres, Browser, etc.). Without
# this set, the infra node tries to resolve cluster DNS from your laptop
# and hangs forever on /health polling.
INFRASTRUCTURE_TARGET=local

# ----- Security: Rate Limiting -----
# Set to "false" to disable rate limiting (default: enabled)
RATE_LIMIT_ENABLED=true
# Requests per second per IP (default: 200)
RATE_LIMIT_RPS=200
# Burst capacity per IP (default: 5000)
RATE_LIMIT_BURST=5000