.env.example

APP_ENV=local
LOG_LEVEL=INFO
LANGSMITH_TRACING=false
LANGSMITH_API_KEY=
DATABASE_URL=postgresql://postgres:postgres@localhost:5432/agents
APP_DATABASE_PATH=.data/talent_ops.db
OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4318/v1/traces
OTEL_EXPORT_ENABLED=false
DEFAULT_TENANT=acme
AGENT_VERSION=1.0.0
PROMETHEUS_MULTIPROC_DIR=
SYNTHETIC_TENANTS=3
SYNTHETIC_CANDIDATES_PER_TENANT=250
OPA_URL=http://localhost:8181
CHECKPOINT_DATABASE_URL=postgresql://agent:agent@localhost:5433/agent
REDIS_URL=redis://localhost:6379/0
OPENSEARCH_URL=http://localhost:9200
MINIO_ENDPOINT=http://localhost:9000
MINIO_ACCESS_KEY=minioadmin
MINIO_SECRET_KEY=minioadmin
MINIO_BUCKET=talent-ops-artifacts
OIDC_ISSUER_URL=http://localhost:8082/realms/talent-ops
OIDC_AUDIENCE=talent-ops-agent
# Set true in every non-dev profile: reject requests without a verified OIDC identity
# so tenant/role scoping can never fall back to caller-supplied body fields.
REQUIRE_AUTHENTICATED_IDENTITY=false
RATE_LIMIT_MAX_CALLS=60
RATE_LIMIT_WINDOW_SECONDS=60
KILL_SWITCH_TOOLS=
OPA_FAIL_CLOSED=true