.env.example

# Circuit Breaker — environment template
# Copy to .env (or .env.local for dev) and fill in values before running.
# This file is safe to commit. .env is in .gitignore.

# ── Security (REQUIRED — change before production) ───────────────────────────
# Min 32 chars. Generate: python3 -c "import secrets; print(secrets.token_hex(32))"
CB_JWT_SECRET=

# Fernet key. Generate: python3 -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
CB_VAULT_KEY=

# Strong password for embedded Postgres (breaker user).
CB_DB_PASSWORD=

# Internal NATS bus auth. Generate: openssl rand -base64 32
NATS_AUTH_TOKEN=

# ── Network ───────────────────────────────────────────────────────────────────
CB_PORT=80
CB_PORT_HTTPS=443
# CB_APP_URL=http://localhost:80   # change to your domain if behind a proxy

# ── Data & Image ─────────────────────────────────────────────────────────────
# CB_DATA_DIR=./circuitbreaker-data
# CB_IMAGE=ghcr.io/blkleg/circuitbreaker:mono-latest
# CB_TAG=latest

# ── Optional: external DB (leave unset for embedded Postgres) ─────────────────
# CB_DB_URL=postgresql://breaker:YOUR_PASSWORD@host:5432/circuitbreaker

# ── Optional: Redis (leave unset for embedded Redis) ──────────────────────────
# CB_REDIS_URL=redis://:password@host:6379/0

# ── Optional: Docker discovery ────────────────────────────────────────────────
# docker compose -f docker-compose.yml -f docker/docker-compose.socket.yml up -d
# or: CB_DOCKER_HOST=tcp://docker-socket-proxy:2375
# CB_DOCKER_HOST=