# =====================
# Avatar API - Environment Configuration
# Template Version: 1.0.0
# Compatible with octopize-avatar-deploy: >=1.0.0,<2.0.0
# =====================

# --- Project/Organization ---
ENV_NAME=production

# --- Paths & Storage ---
SECRETS_DIR=.secrets
DB_VOLUME=avatar_postgres_data
SEAWEEDFS_VOLUME=avatar_seaweedfs_data
# --- Service Versions ---
AVATAR_API_VERSION=2.77.0
AVATAR_PDFGENERATOR_VERSION=0.2.3
AVATAR_WEB_VERSION=0.63.0
AVATAR_SEAWEEDFS_REGISTRY=chrislusf
AVATAR_SEAWEEDFS_VERSION=4.22

AVATAR_SEAWEEDFS_LOG_VERBOSITY=0

AVATAR_AUTHENTIK_VERSION=2026.2.2
AVATAR_AUTHENTIK_REPOSITORY=ghcr.io/goauthentik

# --- Authentik Bootstrap Configuration ---
# These credentials are used for automated installation (skip OOBE)
AUTHENTIK_BOOTSTRAP_EMAIL=admin@example.com
AUTHENTIK_BOOTSTRAP_PASSWORD=RPmOk0GpSzNKCUTTjnYJBM6S3IBNhDDgg4ejt1UjI8c
AUTHENTIK_BOOTSTRAP_TOKEN=o1o2q1o-Nenzb4mrb54DIXlevwfFfT-DQ982-CyB8RA

# --- Service URLs ---
AVATAR_DOMAIN=avatar.example.com
# Defines the URL where the web client is served.
AVATAR_WEB_CLIENT_URL=https://avatar.example.com/web/
# Defines the URL where the PDF generator is served.
AVATAR_PDFGENERATOR_URL=http://pdfgenerator:8000# --- API Configuration ---

# Defines the URL where the API is served.
AVATAR_API_URL=https://avatar.example.com/api
# Public and internal storage endpoint URLs
AVATAR_STORAGE_ENDPOINT_PUBLIC_URL=https://avatar.example.com/storage
AVATAR_STORAGE_ENDPOINT_INTERNAL_URL=http://s3:8333


## SSO Configuration ##
# Blueprint environment variables (used by authentik to resolve !Env tags in the blueprint)
AVATAR_AUTHENTIK_BLUEPRINT_DOMAIN=avatar.example.com
AVATAR_AUTHENTIK_BLUEPRINT_CLIENT_ID=b922269935c9b83a2cdc15758bf9f6b6f3fb4fa73ca50c0419e4cbbdffe80c8b
AVATAR_AUTHENTIK_BLUEPRINT_CLIENT_SECRET=7aeeffe1e4413867ac0378b10449f8745ab5a20ceb57f0187c685196296861be
AVATAR_AUTHENTIK_BLUEPRINT_API_REDIRECT_URI=https://avatar.example.com/api/login/sso/auth
AVATAR_AUTHENTIK_BLUEPRINT_SELF_SERVICE_LICENSE=demo

# SSO settings for the Avatar API service
SSO_CLIENT_ID=b922269935c9b83a2cdc15758bf9f6b6f3fb4fa73ca50c0419e4cbbdffe80c8b
SSO_CLIENT_SECRET=7aeeffe1e4413867ac0378b10449f8745ab5a20ceb57f0187c685196296861be
SSO_PROVIDER_APP_NAME=avatar-api
SSO_PROVIDER_URL=https://avatar.example.com/sso


# Number of days after which datasets will be deleted (ISO8601 timedelta string, e.g. 30d, 2w, 12h)
SHARED_STORAGE_PATH=s3://{user_id}/{expire_days}d # for seaweedfs

# --- Logging & Debug ---
# Whether to prettify the logger output. Default is false, and will output JSON.
USE_CONSOLE_LOGGING=false
# Whether to enable Sentry for error tracking.
IS_SENTRY_ENABLED=true
# Logging level. Can be one of DEBUG, INFO, WARNING, ERROR, CRITICAL.
LOG_LEVEL=INFO

# =============================
# SMTP Email Configuration
#
# SMTP_HOST=smtp.example.com
# SMTP_PORT=587
# SMTP_USE_TLS=true
# SMTP_START_TLS=false
# SMTP_VERIFY=true
# SMTP_SENDER_EMAIL=noreply@example.com
# # SMTP_USERNAME=<your-smtp-username>    # Optional, if SMTP server requires auth
# # SMTP_PASSWORD=<your-smtp-password>    # Optional, if SMTP server requires auth


# # =============================

# =============================
# To enable Telemetry, set the following variables:
TELEMETRY_S3_ENDPOINT_URL=https://s3.fr-par.scw.cloud
TELEMETRY_S3_REGION=fr-par
TELEMETRY_S3_BUCKET_NAME=avatar-telemetry-production
# =============================
