# ProjectBrain local/self-host defaults
PROJECTBRAIN_WEB_PORT=1209
PROJECTBRAIN_DATA_SOURCE=database
PROJECTBRAIN_SEED_ON_START=true
LOG_LEVEL=info

# PostgreSQL values used by docker-compose.yml.
# Copy this file to .env and replace the password before starting production.
POSTGRES_DB=projectbrain
POSTGRES_USER=projectbrain
POSTGRES_PASSWORD=replace-with-a-unique-postgres-password
DATABASE_URL=postgresql://projectbrain:replace-with-a-unique-postgres-password@postgres:5432/projectbrain?schema=public

# Frontend build-time mode
# mock = use current in-memory frontend client
# real = use the Fastify API through the nginx /api proxy
VITE_PROJECTBRAIN_CLIENT_MODE=real
VITE_PROJECTBRAIN_API_URL=
# Development-only Vite proxy target used when client mode is real.
PROJECTBRAIN_DEV_API_TARGET=http://127.0.0.1:4000

# Required authentication bootstrap. Production rejects these placeholder values.
PROJECTBRAIN_OWNER_USERNAME=owner
PROJECTBRAIN_OWNER_PASSWORD=replace-with-a-unique-password-of-at-least-12-characters
PROJECTBRAIN_AUTH_SECRET=replace-with-at-least-32-random-characters
PROJECTBRAIN_SESSION_TTL_HOURS=24
PROJECTBRAIN_TRUST_PROXY=true

# Server-side Gitea and ChatGPT MCP integration. The token never reaches the browser.
PROJECTBRAIN_GITEA_URL=https://gitea.example.com
PROJECTBRAIN_GITEA_TOKEN=
# Optional separate token with write:issue and write:repository. Falls back to the service token.
PROJECTBRAIN_GITEA_WRITE_TOKEN=
PROJECTBRAIN_GITEA_WEBHOOK_SECRET=
PROJECTBRAIN_MCP_ENABLED=false
PROJECTBRAIN_ANALYSIS_WORKER_PORT=4001
PROJECTBRAIN_ANALYSIS_POLL_MS=1000
PROJECTBRAIN_ANALYSIS_BATCH_SIZE=5
PROJECTBRAIN_ANALYSIS_REPOSITORY_CONCURRENCY=2
PROJECTBRAIN_ANALYSIS_JOB_TIMEOUT_SECONDS=1800
PROJECTBRAIN_ANALYSIS_STALE_SECONDS=300
PROJECTBRAIN_ANALYSIS_SCHEDULE_MINUTES=1440
PROJECTBRAIN_AUTO_ONBOARD_REPOSITORIES=true
PROJECTBRAIN_REPOSITORY_RECONCILE_SECONDS=60
PROJECTBRAIN_AUTONOMY_EXECUTOR_STALE_SECONDS=5400
# A queued Gitea job with a compatible idle runner is considered polling-stalled after this grace period.
PROJECTBRAIN_RUNNER_CLAIM_STALL_SECONDS=120
PROJECTBRAIN_PUBLIC_URL=https://projectbrain.example.com
# Optional server-to-server credential used only by the governed ITWorx MCP Hub.
PROJECTBRAIN_HUB_SERVICE_TOKEN=

# Optional Microsoft Entra ID login. Register the callback as a Web redirect URI:
# https://projectbrain.example.com/api/auth/entra/callback
PROJECTBRAIN_ENTRA_TENANT_ID=
PROJECTBRAIN_ENTRA_CLIENT_ID=
PROJECTBRAIN_ENTRA_CLIENT_SECRET=