.env.example

# Local Docker Compose configuration. Copy to .env; never commit that file.
# Private HTTPS deployment: use deploy/.env.production.example instead.

# Browser-facing ports (change origin settings below when changing frontend port).
FRONTEND_PORT=5173
BACKEND_PORT=8000
SYNC_PORT=8787

# Development database credentials. Keep existing values when reusing data volumes.
POSTGRES_DB=projectoc
POSTGRES_USER=projectoc
POSTGRES_PASSWORD=projectoc
NEO4J_PASSWORD=projectoc-local-change-me

# Optional online AI. Empty key selects the offline rules demonstration.
OPENAI_BASE_URL=https://api.openai.com/v1
OPENAI_API_KEY=
OPENAI_MODEL=gpt-4o-mini
# Set a stable Fernet key before storing workspace-specific AI credentials.
# Generate: python3 -c 'import base64,secrets; print(base64.urlsafe_b64encode(secrets.token_bytes(32)).decode())'
WORKSPACE_CREDENTIALS_KEY=

DJANGO_DEBUG=1
CORS_ALLOWED_ORIGINS=http://localhost:5173,http://127.0.0.1:5173
CSRF_TRUSTED_ORIGINS=http://localhost:5173,http://127.0.0.1:5173

# Both backend and sync service use these same values.
SYNC_SERVICE_URL=ws://127.0.0.1:8787
SYNC_TICKET_SECRET=projectoc-sync-ticket-local-change-me
SYNC_INTERNAL_SECRET=projectoc-sync-local-secret
SYNC_ALLOWED_ORIGINS=http://localhost:5173,http://127.0.0.1:5173
SYNC_REQUIRE_ORIGIN=0
SYNC_MAX_ROOM_CLIENTS=50
SYNC_REDIS_URL=redis://redis:6379
SYNC_REDIS_PREFIX=projectoc:sync
TLDRAW_SCHEMA_VERSION=oc-tldraw-2
# Official sync is always enabled; no legacy protocol feature flags.
VITE_TLDRAW_LICENSE_KEY=

# Durable Git/Neo4j worker.
OUTBOX_WORKER_INTERVAL=5
OUTBOX_WORKER_BATCH=20
OUTBOX_WORKER_LEASE_SECONDS=120
OUTBOX_RETRY_BASE_SECONDS=5
OUTBOX_RETRY_MAX_SECONDS=900
OUTBOX_MAX_ATTEMPTS=12