# FILE: infra/compose/env.example

# Domain Configuration
DOMAIN=local
EMAIL=admin@local.lan

# Database Passwords
POSTGRES_PASSWORD=postgres
NEO4J_PASSWORD=neo4jpass
AUTHENTIK_DB_PASSWORD=authentik

# Object Storage
MINIO_ROOT_USER=minio
MINIO_ROOT_PASSWORD=miniopass
MINIO_ACCESS_KEY=minio
MINIO_SECRET_KEY=miniopass

# Vector Database
QDRANT__SERVICE__GRPC_PORT=6334

# Secrets Management
VAULT_DEV_ROOT_TOKEN_ID=root

# Identity & SSO
AUTHENTIK_SECRET_KEY=changeme
AUTHENTIK_OUTPOST_TOKEN=changeme
AUTHENTIK_BOOTSTRAP_EMAIL=admin@local.lan
AUTHENTIK_BOOTSTRAP_PASSWORD=admin123
AUTHENTIK_BOOTSTRAP_TOKEN=

# Monitoring
GRAFANA_PASSWORD=admin
GRAFANA_OAUTH_CLIENT_ID=grafana
GRAFANA_OAUTH_CLIENT_SECRET=changeme

# OAuth Client Secrets for Authentik Providers
AUTHENTIK_API_CLIENT_SECRET=changeme-api-secret
AUTHENTIK_UI_REVIEW_CLIENT_SECRET=changeme-ui-review-secret
AUTHENTIK_GRAFANA_CLIENT_SECRET=changeme-grafana-secret
AUTHENTIK_MINIO_CLIENT_SECRET=changeme-minio-secret
AUTHENTIK_VAULT_CLIENT_SECRET=changeme-vault-secret

# Feature Flags
UNLEASH_ADMIN_TOKEN=development.unleash-insecure-admin-api-token

# Application Configuration
NEXTAUTH_SECRET=changeme

# RAG & ML Models
RAG_EMBEDDING_MODEL=bge-small-en-v1.5
RAG_RERANKER_MODEL=cross-encoder/ms-marco-MiniLM-L-6-v2
RAG_ALPHA_BETA_GAMMA=0.5,0.3,0.2

# HMRC Integration
HMRC_MTD_ITSA_MODE=sandbox

# Rate Limits
RATE_LIMITS_HMRC_API_RPS=3
RATE_LIMITS_HMRC_API_BURST=6
RATE_LIMITS_LLM_API_RPS=10
RATE_LIMITS_LLM_API_BURST=20

# Confidence Thresholds
CONFIDENCE_AUTO_SUBMIT=0.95
CONFIDENCE_HUMAN_REVIEW=0.85
CONFIDENCE_REJECT=0.50

# Logging
LOG_LEVEL=INFO
LOG_FORMAT=json

# Development Settings
DEBUG=false
DEVELOPMENT_MODE=true

# Security
ENCRYPTION_KEY_ID=default
AUDIT_LOG_RETENTION_DAYS=90
PII_LOG_RETENTION_DAYS=30

# Backup & DR
BACKUP_ENABLED=true
BACKUP_SCHEDULE=0 2 * * *
BACKUP_RETENTION_DAYS=30

# Performance Tuning
MAX_WORKERS=4
BATCH_SIZE=100
CACHE_TTL_SECONDS=3600
CONNECTION_POOL_SIZE=20

# Feature Flags
FEATURE_RAG_ENABLED=true
FEATURE_FIRM_CONNECTORS_ENABLED=false
FEATURE_HMRC_SUBMISSION_ENABLED=false
FEATURE_ADVANCED_CALCULATIONS_ENABLED=true

# Event Bus Configuration
EVENT_BUS_TYPE=memory
KAFKA_BOOTSTRAP_SERVERS=

# NATS Configuration
NATS_SERVERS=nats://nats:4222
NATS_STREAM_NAME=TAX_AGENT_EVENTS
NATS_CONSUMER_GROUP=tax-agent
NATS_LOG_LEVEL=info
