example.env

# ============================================================================
# MailShieldAI Configuration - Single User Setup
# ============================================================================

# Database (GCP Cloud SQL PostgreSQL - REQUIRED)
# Format: postgresql://USER:PASSWORD@HOST:PORT/DATABASE?sslmode=require
# For Cloud SQL with private IP: postgresql://USER:PASSWORD@PRIVATE_IP/DATABASE
# For Cloud SQL with public IP + SSL: include sslmode=require
DATABASE_URL=postgresql://postgres:PASSWORD@127.0.0.1:5432/mailshieldai?sslmode=require

# Google OAuth (REQUIRED for production)
# Get these from Google Cloud Console: https://console.cloud.google.com/apis/credentials
AUTH_GOOGLE_ID=your-google-client-id.apps.googleusercontent.com
AUTH_GOOGLE_SECRET=your-google-client-secret

# NextAuth.js Configuration
NEXTAUTH_URL=http://localhost:3000
NEXTAUTH_SECRET=your-nextauth-secret-generate-with-openssl-rand-base64-32

# Worker Configuration
POLL_INTERVAL_SECONDS=5
BATCH_LIMIT=10

# Frontend API Configuration
NEXT_PUBLIC_API_URL=http://localhost:8000

# API CORS (comma-separated list of allowed origins)
# WARNING: Do not use "*" in production - specify exact origins
CORS_ALLOW_ORIGINS=http://localhost:3000

# Development Mode
# Set to "true" to enable insecure JWT fallback (NEVER in production!)
# In DEV_MODE, use "dev_anytoken" as bearer token for testing
DEV_MODE=false

# ============================================================================
# Agent Pipeline Configuration
# ============================================================================

# Decision Agent Configuration
DECISION_AGENT_URL=http://localhost:8080/analyze
HYBRID_ANALYSIS_API_KEY=your-hybrid-analysis-api-key
USE_REAL_SANDBOX=false

# Action Agent Configuration (The Enforcer)
ACTION_AGENT_URL=http://localhost:9001/execute
MOVE_MALICIOUS_TO_SPAM=true

# Gemini AI Configuration (for URL analysis fallback)
# Get your API key from: https://makersuite.google.com/app/apikey
GEMINI_API_KEY=your-gemini-api-key