.env.example

# This file includes global variables that will be available inside your project
# 1. In the front end code you can access this variables like this: console.log(import.meta.env.VARIABLE_NAME)
# 1. In the back end code you access the variable by importing os and then typing print(os.getenv('VARIABLE_NAME'))

# Back-End Variables
DATABASE_URL=postgres://gitpod:postgres@localhost:5432/example
FLASK_APP_KEY="any key works"
FLASK_APP=src/app.py
FLASK_DEBUG=1
DEBUG=TRUE

# Front-End Variables
VITE_BASENAME=/
#VITE_BACKEND_URL=

# Authentication (#22): generate a random value; never commit the real secret.
JWT_SECRET_KEY=
FRONTEND_ORIGIN=http://localhost:3000
AUTH_RESET_URL=http://localhost:3000/reset-password
# Local simulation only with FLASK_DEBUG=1; reset links are private files.
# AUTH_RESET_OUTBOX=.local/reset-outbox
# SMTP_HOST=
# SMTP_PORT=587
# SMTP_FROM=
# SMTP_USER=
# SMTP_PASSWORD=
# Production alternative: Resend HTTPS email delivery.
# RESEND_API_KEY=re_...
# AUTH_EMAIL_FROM=ClientFlow <no-reply@your-verified-domain.example>
# Admin is disabled by default; local development only.
ENABLE_DEV_ADMIN=0
# Set false to connect the authentication UI to the backend.
VITE_USE_MOCK_API=false
VITE_BACKEND_URL=http://localhost:3001
# Private embeddings service — backend only
KNOWLEDGE_EMBEDDINGS_URL=
KNOWLEDGE_EMBEDDINGS_API_KEY=
KNOWLEDGE_EMBEDDINGS_MODEL=embeddinggemma
KNOWLEDGE_EMBEDDINGS_DIMENSIONS=768

# AI-01: server-side only. Never prefix service credentials with VITE_.
AI_SERVICE_URL=https://mac-mini-de-stonetech.taildc6e48.ts.net/v1/agents/customer-service/respond
AI_SERVICE_MODEL=qwen2.5:3b
AI_MIN_SIMILARITY=0.5
# Restrict the single credential to this local ClientFlow company ID.
AI_SERVICE_COMPANY_ID=
AI_SERVICE_API_KEY=
# Alternatively map each company ID to its own provisioned service credential.
# AI_SERVICE_COMPANY_KEYS={"1":"private-service-key"}

# Use only with a stateless inference endpoint; tenant authorization stays in ClientFlow.
AI_SERVICE_AUTH_MODE=company
AI_SERVICE_PLATFORM_KEY=

# Browser plan setup: random secret of at least 32 characters; empty disables writes.
# Backend only. Remove after setup. Never use a VITE_ prefix.
PLAN_SEED_KEY=