.env.example

# ─── Docker Compose variables ─────────────────────────────────────────────────
# These are used by docker-compose.yml to configure the Postgres container
# AND to build the DATABASE_URL passed to the backend/worker services.
# Change POSTGRES_PASSWORD to a strong secret before running in production.

POSTGRES_DB=soc_saas
POSTGRES_USER=soc_user
POSTGRES_PASSWORD=changeme_strong_password

# ─── Backend (Docker Compose) ─────────────────────────────────────────────────
# These values use Docker service names (db / redis) — correct inside Docker.
# For running the backend directly on the host, see backend/.env.example.

DATABASE_URL=postgresql://soc_user:changeme_strong_password@db:5432/soc_saas
REDIS_URL=redis://redis:6379/0

# ─── JWT (generate with: openssl rand -hex 64) ────────────────────────────────
# REQUIRED — must be set before first run. Both values must differ.
JWT_SECRET=changeme_generate_with_openssl_rand_hex_64
JWT_REFRESH_SECRET=changeme_generate_different_secret_with_openssl_rand_hex_64

# ─── Frontend (Docker Compose dev mode) ───────────────────────────────────────
# The browser connects from the host machine, so localhost:<exposed port> works
# in Docker Compose. For production (Railway/Vercel) set the real backend URL.
#
# PRODUCTION: Set VITE_API_URL=https://your-backend.up.railway.app
#             Set VITE_WS_URL=wss://your-backend.up.railway.app
VITE_API_URL=http://localhost:8000
VITE_WS_URL=ws://localhost:8000

# ─── Threat Intelligence (Phase 1) ───────────────────────────────────────────
# All optional — enrichment degrades gracefully if keys are missing.
# GeoIP uses ip-api.com (free, no key needed).
# Sign up: https://www.abuseipdb.com  — free tier: 1000 checks/day
ABUSEIPDB_API_KEY=
# Sign up: https://otx.alienvault.com — free
ALIENVAULT_API_KEY=
# Sign up: https://www.virustotal.com  — free tier: 500 lookups/day
VIRUSTOTAL_API_KEY=

# ─── Optional: multi-instance isolation ─────────────────────────────────────
# Set this if you run multiple instances of this project on the same Docker host
# to avoid container name conflicts.
# COMPOSE_PROJECT_NAME=soc