# Backend (Flask) environment — copy to .env

# --- Database ---
MONGO_URI=mongodb://localhost:27017
MONGO_DB=codewhisperer

# --- Auth (REQUIRED in production; app refuses to start without it) ---
JWT_SECRET=change-me-to-a-long-random-string

# --- Runtime ---
FLASK_ENV=development        # development | production
PORT=5000
FRONTEND_URL=http://localhost:8080   # used for CORS + password-reset links

# --- Optional: local AI enhancer models ---
# OFF by default. The bundled small models are not instruction-tuned and
# produce invalid "fixes", so they are disabled. The deterministic AST engine
# is the real enhancer. Only turn this on if you wire up a capable model.
ENABLE_MODELS=false

# --- Built-in free AI enhancer (OpenRouter fallback) ---
# The AI enhancer lets users bring their own provider + key. If they instead
# pick the "FortiScan free" option, the server uses this OpenRouter key + model.
# Leave OPENROUTER_API_KEY empty to disable the built-in option (users can still
# bring their own key). The model is server-controlled to protect the shared key.
OPENROUTER_API_KEY=
OPENROUTER_FALLBACK_MODEL=nvidia/nemotron-3-super-120b-a12b:free

# --- Optional: shared rate-limit + cache store ---
USE_REDIS=false
REDIS_URL=redis://localhost:6379/0

# --- Optional: email + verification providers ---
ABSTRACT_API_KEY=
BREVO_API_KEY=
RESEND_API_KEY=