# =====================
# Avatar API - Environment Configuration
# Template Version: 1.0.0
# Compatible with octopize-avatar-deploy: >=1.0.0,<2.0.0
# =====================

# --- Project/Organization ---
ENV_NAME=production

# --- Paths & Storage ---
SECRETS_DIR=.secrets
DB_VOLUME=avatar_postgres_data
SEAWEEDFS_VOLUME=avatar_seaweedfs_data
# --- Service Versions ---
AVATAR_API_VERSION=2.73.0
AVATAR_PDFGENERATOR_VERSION=0.2.3
AVATAR_WEB_VERSION=0.63.0
AVATAR_SEAWEEDFS_REGISTRY=chrislusf
AVATAR_SEAWEEDFS_VERSION=4.22

AVATAR_SEAWEEDFS_LOG_VERBOSITY=0

AVATAR_AUTHENTIK_VERSION=2026.2.2
AVATAR_AUTHENTIK_REPOSITORY=ghcr.io/goauthentik

# --- Authentik Bootstrap Configuration ---
# These credentials are used for automated installation (skip OOBE)
AUTHENTIK_BOOTSTRAP_EMAIL=admin@example.com
AUTHENTIK_BOOTSTRAP_PASSWORD=Ov3M8CPeITqevcf0jtqWBolVzH3Cq_wZrzj6SDjGj6I
AUTHENTIK_BOOTSTRAP_TOKEN=Zs3cCYfFkE_f4FiD0VcAceRKbu3KWYhaM3_KaBi_O-4

# --- Service URLs ---
AVATAR_DOMAIN=avatar.example.com
# Defines the URL where the web client is served.
AVATAR_WEB_CLIENT_URL=https://avatar.example.com/web/
# Defines the URL where the PDF generator is served.
AVATAR_PDFGENERATOR_URL=http://pdfgenerator:8000# --- API Configuration ---

# Defines the URL where the API is served.
AVATAR_API_URL=https://avatar.example.com/api
# Public and internal storage endpoint URLs
AVATAR_STORAGE_ENDPOINT_PUBLIC_URL=https://avatar.example.com/storage
AVATAR_STORAGE_ENDPOINT_INTERNAL_URL=http://s3:8333


## SSO Configuration ##
# Blueprint environment variables (used by authentik to resolve !Env tags in the blueprint)
AVATAR_AUTHENTIK_BLUEPRINT_DOMAIN=avatar.example.com
AVATAR_AUTHENTIK_BLUEPRINT_CLIENT_ID=c798f1bc1d97b9ee76ea80344c14f4f07291d0028f54bbf3d23fee98176b6d08
AVATAR_AUTHENTIK_BLUEPRINT_CLIENT_SECRET=194a02f9503191b6ed4e412ffcbefe114dea96d97f60f401303170a8ad5f9cae
AVATAR_AUTHENTIK_BLUEPRINT_API_REDIRECT_URI=https://avatar.example.com/api/login/sso/auth
AVATAR_AUTHENTIK_BLUEPRINT_SELF_SERVICE_LICENSE=demo

# SSO settings for the Avatar API service
SSO_CLIENT_ID=c798f1bc1d97b9ee76ea80344c14f4f07291d0028f54bbf3d23fee98176b6d08
SSO_CLIENT_SECRET=194a02f9503191b6ed4e412ffcbefe114dea96d97f60f401303170a8ad5f9cae
SSO_PROVIDER_APP_NAME=avatar-api
SSO_PROVIDER_URL=https://avatar.example.com/sso


# Number of days after which datasets will be deleted (ISO8601 timedelta string, e.g. 30d, 2w, 12h)
SHARED_STORAGE_PATH=s3://{user_id}/{expire_days}d # for seaweedfs

# --- Logging & Debug ---
# Whether to prettify the logger output. Default is false, and will output JSON.
USE_CONSOLE_LOGGING=false
# Whether to enable Sentry for error tracking.
IS_SENTRY_ENABLED=true
# Logging level. Can be one of DEBUG, INFO, WARNING, ERROR, CRITICAL.
LOG_LEVEL=INFO

# =============================
# SMTP Email Configuration
#
# SMTP_HOST=smtp.example.com
# SMTP_PORT=587
# SMTP_USE_TLS=true
# SMTP_START_TLS=false
# SMTP_VERIFY=true
# SMTP_SENDER_EMAIL=noreply@example.com
# # SMTP_USERNAME=<your-smtp-username>    # Optional, if SMTP server requires auth
# # SMTP_PASSWORD=<your-smtp-password>    # Optional, if SMTP server requires auth


# # =============================

# =============================
# To enable Telemetry, set the following variables:
TELEMETRY_S3_ENDPOINT_URL=https://s3.fr-par.scw.cloud
TELEMETRY_S3_REGION=fr-par
# TELEMETRY_S3_BUCKET_NAME=<bucket-name> # Will be provided to you by Octopize
# =============================
