.env.example

# SPDX-License-Identifier: MPL-2.0
# SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell (hyperpolymath)
#
# echidnabot — Compose deployment environment template (issue #60).
#
# Usage:
#   cp .env.example .env
#   $EDITOR .env             # fill in real values
#   docker compose up -d     # or: podman-compose up -d
#
# NEVER commit a populated .env — see .gitignore. All non-placeholder
# values below are CLEARLY FAKE on purpose; replace before deploying.

# ─── PostgreSQL service ─────────────────────────────────────────────────
# Used by the `postgres` Compose service AND injected into echidnabot
# as part of DATABASE_URL below. The DB is reached over the internal
# Compose network only; the port is NOT exposed to the host by default.
POSTGRES_USER=echidnabot
POSTGRES_PASSWORD=changeme
POSTGRES_DB=echidnabot

# ─── echidnabot service ─────────────────────────────────────────────────
# DATABASE_URL — sqlx-compatible Postgres connection string.
# Hostname `postgres` resolves to the Compose service.
DATABASE_URL=postgres://echidnabot:changeme@postgres:5432/echidnabot

# Bind host/port inside the container. The compose port mapping
# publishes 8080 -> host:8080 by default; change PORT here AND the
# mapping in compose.yml if you need something else.
ECHIDNABOT__SERVER__HOST=0.0.0.0
ECHIDNABOT__SERVER__PORT=8080
RUST_LOG=info

# ─── ECHIDNA prover orchestrator (REST endpoint) ────────────────────────
# In `--profile dev` Compose runs an `echidna-server` stub that returns
# canned JSON on /api/verify (see compose.yml). For real deployments,
# point this at a production ECHIDNA instance.
ECHIDNA_API_URL=http://echidna-server:9100
ECHIDNABOT__ECHIDNA__ENDPOINT=http://echidna-server:9100/graphql
ECHIDNABOT__ECHIDNA__REST_ENDPOINT=http://echidna-server:9100
ECHIDNABOT__ECHIDNA__MODE=rest

# ─── GitHub App credentials (optional — required for GitHub webhooks) ───
# Leave commented for a no-platform smoke test; uncomment + fill to wire
# the GitHub adapter. Use a GitHub App in production (PEM key mounted as
# a secret), or a PAT for quick local testing.
# GITHUB_APP_ID=000000
# GITHUB_APP_PRIVATE_KEY_PATH=/run/secrets/github-app.pem
# GITHUB_WEBHOOK_SECRET=changeme
# GITHUB_TOKEN=ghp_changeme

# ─── GitLab / Bitbucket (optional) ──────────────────────────────────────
# GITLAB_TOKEN=glpat-changeme
# GITLAB_WEBHOOK_SECRET=changeme
# BITBUCKET_WEBHOOK_SECRET=changeme

# ─── Observability (OpenTelemetry — optional) ───────────────────────────
# Point at a local Jaeger / Tempo / OTel collector if you want traces.
# Leave unset to disable. See in-flight PR #65 for the consuming code.
# OTEL_EXPORTER_OTLP_ENDPOINT=http://otel-collector:4317
# OTEL_SERVICE_NAME=echidnabot
# OTEL_RESOURCE_ATTRIBUTES=deployment.environment=local