.env.example

# FinWatch example environment.
#
# Copy to `.env` for local development: `cp .env.example .env`
# These are SAFE, NON-SECRET example development credentials only. Never put
# real secrets here, and never commit a real `.env`.

# --- API ---------------------------------------------------------------
APP_ENV=development
LOG_LEVEL=info
HTTP_HOST=0.0.0.0
HTTP_PORT=8080
HTTP_READ_TIMEOUT=15s
HTTP_WRITE_TIMEOUT=15s
HTTP_IDLE_TIMEOUT=60s
HTTP_SHUTDOWN_TIMEOUT=15s
CORS_ALLOWED_ORIGINS=http://localhost:5173,http://localhost:8081

# JWT signing secret: a SAFE example dev value only, at least 32 characters.
# Never reuse this value outside local development.
JWT_SIGNING_SECRET=dev_only_example_secret_change_me_32+chars
JWT_ACCESS_TOKEN_TTL=15m

# Demo account passwords for `go run ./cmd/api seed-users` (operator@example.com,
# admin@example.com). SAFE example dev values only.
DEMO_OPERATOR_PASSWORD=operator_dev_password
DEMO_ADMIN_PASSWORD=admin_dev_password

# --- Database (example dev values only) --------------------------------
POSTGRES_USER=finwatch
POSTGRES_PASSWORD=finwatch_dev_password
POSTGRES_DB=finwatch
# Host that the API uses to reach Postgres. Inside Docker Compose this is the
# service name `db`; from the host machine it is `localhost`.
DATABASE_URL=postgres://finwatch:finwatch_dev_password@db:5432/finwatch?sslmode=disable

# --- Web ---------------------------------------------------------------
VITE_API_URL=http://localhost:8080
VITE_WS_URL=ws://localhost:8080/ws