.env.example

# Copy to `.env` (never commit `.env`). Compose loads it for variable substitution
# and passes selected keys into the `api` service.
#
#   cp .env.example .env

# --- Ports (host side) ---
# UI_PORT=8080
# API_PORT=8000

# --- Published images (optional; used with docker-compose.publish.yml) ---
# Default local build tags are ehr-risk-api:local / ehr-risk-web:local.
# For pull-only runs (Docker Hub):
#   docker compose -f docker-compose.yml -f docker-compose.publish.yml up
# IMAGE_API=ranasl62/ehr-risk-api:latest
# IMAGE_WEB=ranasl62/ehr-risk-web:latest
# PULL_POLICY=always
# Pin a release tag when available, e.g. :v1.0.0 or :sha-abcdef1


# --- Security (optional; leave empty for open local research use) ---
# When set, protected routes require header: X-API-Key: <value>
API_KEY=

# Comma-separated browser origins for CORS (API runtime). Passed into the `api` service.
# Leave empty for local defaults (:8080 Compose UI + :4200 ng serve).
# Split deploy (UI on Render/Vercel calling a remote API) — set the UI origin(s):
# CORS_ORIGINS=https://ehr-risk-framework.larucare.com
CORS_ORIGINS=

# --- Frontend API base (optional; web image / npm production build) ---
# Leave empty for Compose/local: Angular uses same-origin /v1 (nginx or ng serve proxy).
# Set when the UI is deployed separately from the API (e.g. demo UI → API host):
# API_ENDPOINT=https://ehr-api.larucare.com
# CORS_ORIGINS=https://ehr-risk-framework.larucare.com
API_ENDPOINT=

# --- Model / hardening (optional) ---
# MODEL_PATH=model.pkl
# MAX_BODY_BYTES=52428800
# RATE_LIMIT_PER_MINUTE=0
# AUDIT_LOG_JSONL=/var/log/ehr_api_audit.jsonl

# --- Prepare service ---
# FORCE_TRAIN=1   # retrain model.pkl on every `docker compose up`