# Database
DATABASE_URL=postgresql+asyncpg://trustos:trustos_dev@postgres:5432/trustos
SYNC_DATABASE_URL=postgresql://trustos:trustos_dev@postgres:5432/trustos

# Auth
# IMPORTANT: Generate a secure random key in production using: openssl rand -hex 32
# Never use the default value in production environments
SECRET_KEY=changeme-use-openssl-rand-hex-32-in-production
ACCESS_TOKEN_EXPIRE_MINUTES=480

# AI — defaults to Anthropic/Claude (model: claude-sonnet-5).
# Leave the placeholders as-is to run in mock mode (all AI features return
# canned demo responses). Drop in a real key to enable live AI.
AI_PROVIDER=anthropic
ANTHROPIC_API_KEY=sk-ant-...
OPENAI_API_KEY=sk-...

# External APIs
HIBP_API_KEY=
NVD_API_KEY=

# Storage
STORAGE_PATH=/app/storage

# Email (optional)
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASS=