.env.example

# ============================================================================
# ALDECI Environment Configuration
# Copy to .env and fill in your keys
# ============================================================================

# --- Core ---
FIXOPS_MODE=enterprise
FIXOPS_API_TOKEN=fixops_ent_YOUR_TOKEN_HERE
FIXOPS_API_KEY=${FIXOPS_API_TOKEN}

# --- Threat Intelligence Feeds ---
# NVD (National Vulnerability Database) — https://nvd.nist.gov/developers/request-an-api-key
NVD_API_KEY=
# AbuseIPDB — https://www.abuseipdb.com/account/api (1K queries/day free)
ABUSEIPDB_API_KEY=
# abuse.ch — https://auth.abuse.ch
ABUSE_CH_API_KEY=
# AlienVault OTX — https://otx.alienvault.com/api
OTX_API_KEY=
# VirusTotal — https://www.virustotal.com/gui/my-apikey
VIRUSTOTAL_API_KEY=
# Shodan — https://account.shodan.io
SHODAN_API_KEY=

# --- AI / LLM ---
# OpenRouter (free models: Qwen 3.6+, Kimi K2, DeepSeek)
OPENROUTER_API_KEY=
# Anthropic (for Shannon pentester, optional)
ANTHROPIC_API_KEY=

# --- Integrations ---
# GitHub (for repo scanning, SBOM generation)
GITHUB_TOKEN=
# Slack (for report delivery)
SLACK_WEBHOOK_URL=
# n8n (workflow automation)
N8N_API_URL=http://localhost:5678
N8N_API_KEY=

# --- Infrastructure ---
# Redis (for queue, rate limiting)
REDIS_URL=redis://localhost:6379/0
# PostgreSQL (for SwarmClaw)
DATABASE_URL=postgresql://swarmclaw:swarmclaw@localhost:5432/swarmclaw

# --- Observability ---
# OpenTelemetry collector (optional)
OTEL_EXPORTER_OTLP_ENDPOINT=http://collector:4318

# --- SMTP (email notifications) ---
# Leave blank to disable email — notification_engine no-ops cleanly when unset
FIXOPS_SMTP_HOST=
FIXOPS_SMTP_PORT=587
FIXOPS_SMTP_USER=
FIXOPS_SMTP_PASS=
FIXOPS_SMTP_FROM=noreply@aldeci.ai

# --- Billing / Stripe ---
# Leave blank to use placeholder checkout URLs
FIXOPS_STRIPE_SECRET_KEY=
FIXOPS_STRIPE_WEBHOOK_SECRET=