# SOMA Environment Variables
# Copy to .env on your server. Never commit .env to any repository.

# ─── App ──────────────────────────────────────────────────────────────
# Generate with: openssl rand -hex 32
NEXTAUTH_SECRET=
NEXTAUTH_URL=https://yourdomain.com
ALLOW_REGISTRATION=true
# Generate with: openssl rand -hex 32
JWT_SECRET=

# ─── Database ─────────────────────────────────────────────────────────
DATABASE_URL=postgresql+asyncpg://soma:somapass@postgres:5432/somadb
POSTGRES_USER=soma
POSTGRES_PASSWORD=somapass
POSTGRES_DB=somadb

# ─── Redis ────────────────────────────────────────────────────────────
REDIS_URL=redis://redis:6379/0

# ─── LLM — Personal (internal Docker network, NEVER changes) ──────────
# Personal data stays on your server. This must always point to Ollama.
OLLAMA_BASE_URL=http://ollama:11434
OLLAMA_MODEL=phi3:mini

# ─── LLM — Documents (book/PDF queries only, no personal context) ─────
GEMINI_API_KEY=

# ─── LLM — Research (web queries only, no personal context) ───────────
PERPLEXITY_API_KEY=

# ─── LLM — General (factual queries only, no personal context) ────────
GROQ_API_KEY=

# ─── Email ────────────────────────────────────────────────────────────
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_REGION=ap-south-1
SES_FROM_EMAIL=noreply@yourdomain.com
REPORT_TO_EMAIL=your@gmail.com

# ─── Config ───────────────────────────────────────────────────────────
SOMA_CONFIG_PATH=/app/config.yaml

# ─── Rate Limiting ────────────────────────────────────────────────────
LOGIN_RATE_LIMIT_ATTEMPTS=5
LOGIN_RATE_LIMIT_WINDOW=900