.env.example

# PostgreSQL
# The Docker Compose services build their own internal DATABASE_URL from these.
POSTGRES_USER=holotable
POSTGRES_PASSWORD=holotable
POSTGRES_DB=holotable
# Example: postgresql://<user>:<password>@localhost:5432/holotable
DATABASE_URL=
PG_POOL_MAX=10

# TimescaleDB seeder (privileged write connection; defaults to DATABASE_URL)
TIMESCALEDB_URL=

# TimescaleDB application source (read-only connection)
# Additional source secret_ref values follow the same <SECRET_REF>_USERNAME /
# <SECRET_REF>_PASSWORD convention.
TS_METRICS_HOST=localhost
TS_METRICS_PORT=5432
TS_METRICS_USERNAME=metrics_ro
TS_METRICS_PASSWORD=readonly

# Seeder
SEED_DEMO=true
SEED_INTERVAL_MS=2000

# Session
# Replace this with a random value of at least 32 characters.
SESSION_SECRET=change-me-to-a-random-secret-of-32-characters
SESSION_COOKIE_NAME=holotable_session

# AI provider
# Set AI_PROVIDER to "gateway" or "openai-compatible" and choose a model.
#
# openai-compatible examples:
#
#   The openai-compatible path uses the Responses API (`/responses`) by
#   default. Set OPENAI_API=chat to switch to the Chat Completions API
#   (`/chat/completions`) for providers that only expose that surface.
#
#   OpenRouter (any OpenRouter model slug — uses the default Responses API):
#     AI_PROVIDER=openai-compatible
#     OPENAI_BASE_URL=https://openrouter.ai/api/v1
#     OPENAI_API_KEY=<your-openrouter-api-key>
#     AI_MODEL=openai/gpt-4o-mini
#
#   OpenCode Zen / Go (OpenAI-compatible models only — use the base URL and key
#   provided by OpenCode; only models that expose an OpenAI-compatible
#   /chat/completions interface are supported via this path, so set
#   OPENAI_API=chat). NOTE: OpenCode uses BARE model ids (no vendor/ prefix),
#   unlike OpenRouter's slugs above. Query GET <base-url>/models for exact ids:
#     AI_PROVIDER=openai-compatible
#     OPENAI_API=chat
#     OPENAI_BASE_URL=https://opencode.ai/zen/go/v1
#     OPENAI_API_KEY=<your-opencode-api-key>
#     AI_MODEL=kimi-k2.7-code
AI_PROVIDER=openai-compatible
AI_MODEL=
OPENAI_API=
OPENAI_BASE_URL=
OPENAI_API_KEY=
AI_GATEWAY_API_KEY=

# Keycloak OIDC
OIDC_ISSUER=http://localhost:8080/realms/holotable
OIDC_CLIENT_ID=holotable
OIDC_CLIENT_SECRET=
OIDC_REDIRECT_URI=http://localhost:3000/api/auth/callback
OIDC_JWKS_URL=http://localhost:8080/realms/holotable/protocol/openid-connect/certs
OIDC_GROUPS_CLAIM=groups
OIDC_SCOPE=openid profile groups
OIDC_AUDIENCE=

# Dashboard and query defaults
DEFAULT_REFRESH_INTERVAL_MS=15000
MIN_REFRESH_INTERVAL_MS=2000
DEFAULT_TIME_FROM=now-1h
DEFAULT_TIME_TO=now
MAX_QUERY_ROWS=5000
MAX_WINDOW_POINTS=720
QUERY_TIMEOUT_SECONDS=20