# Required
DATABASE_URL=postgresql://devrunbook:CHANGE_ME@postgres:5432/devrunbook
PUBLIC_BASE_URL=http://localhost:3000
SESSION_SECRET=GENERATE_AT_LEAST_32_RANDOM_BYTES
INTEGRATION_ENCRYPTION_KEY=BASE64_ENCODED_32_BYTE_KEY
INTEGRATION_ENCRYPTION_KEY_VERSION=v1
# JSON object of retired key-version labels to base64-encoded 32-byte keys.
INTEGRATION_ENCRYPTION_OLD_KEYS={}
CONTENT_ROOT=/content
ARTIFACT_ROOT=/artifacts

# First run and identity
BOOTSTRAP_TOKEN=GENERATE_A_RANDOM_SETUP_TOKEN
REGISTRATION_MODE=closed
TRUSTED_PROXY_CIDRS=
MAINTENANCE_MODE=false

# Import and output limits
MAX_IMPORT_BYTES=10485760
MAX_EXPANDED_ARCHIVE_BYTES=52428800
MAX_ARCHIVE_FILES=500
MAX_SINGLE_FILE_BYTES=5242880
MAX_PROMPT_BYTES=2097152
MAX_EVIDENCE_BYTES=262144
MAX_ARTIFACT_BYTES=5242880

# Gitea network policy
GITEA_PRIVATE_NETWORK_POLICY=deny
GITEA_ALLOWED_HOSTS=
GITEA_REQUEST_TIMEOUT_MS=15000
GITEA_MAX_REDIRECTS=3
GITEA_MAX_FILE_BYTES=1048576
GITEA_MAX_FILES_PER_SNAPSHOT=200

# Retention
ARTIFACT_RETENTION_DAYS=90
AUDIT_RETENTION_DAYS=180
LOG_RETENTION_DAYS=30
SNAPSHOT_RETENTION_COUNT=20

# Operations
LOG_LEVEL=info
WORKER_POLL_INTERVAL_MS=2000
JOB_LEASE_SECONDS=60