.env.example

# Copy to .env on the server and fill in real values. Never commit the real .env.

# --- Database ---
DB_PASSWORD=change-me-strong-password

# --- AuthService (JWT validation) ---
AUTH_AUTHORITY=https://auth.shenxianovo.com
# Session JWTs (desktop Agent via apikeys/exchange) — no trailing slash
AUTH_ISSUER=https://auth.shenxianovo.com
AUTH_AUDIENCE=https://auth.shenxianovo.com
# OIDC access tokens (web login) — issuer carries a trailing slash: it must
# match the discovery document's issuer string exactly (AuthService ADR-016)
AUTH_OIDC_ISSUER=https://auth.shenxianovo.com/
AUTH_OIDC_CLIENT_ID=heartbeat-web
# Leave empty: upstream registers no resources, so OIDC access tokens carry no
# aud claim; the backend pins client_id instead. Set only if upstream adds one.
AUTH_OIDC_AUDIENCE=

# --- Deployment administration ---
# JWT sub allowed to manage deployment-global App identity mappings.
ADMIN_SUBJECT=

# --- Headless Hub ---
# Provision this file on the server before the first deployment. It contains the Hub API key,
# owner sub and infrastructure settings. Collector lifecycle is managed through the Hub UI.
HEADLESS_CONFIG_PATH=./.local/heartbeat-headless.json

# --- Recap LLM (ADR-023, OpenAI-compatible) ---
# BaseUrl/Model have compose defaults (DeepSeek); override only if switching provider.
# RECAP_BASE_URL=https://api.deepseek.com/v1
# RECAP_MODEL=deepseek-v4-pro
RECAP_API_KEY=sk-change-me
# Thinking control: default|low|high|max|none (empty/unknown = provider default).
# Cost is real: on a busy day's digest, high delayed the first narrative token ~175s,
# low ~17s, a non-thinking model ~0.5s. Model-dependent; tune after watching your own days.
RECAP_REASONING_EFFORT=high