# PolicyEye backend environment
# Copy this file to .env and fill in your real keys.

# ==========================================
# REQUIRED CONFIGURATION
# ==========================================

# --- Database (Supabase PostgreSQL) ---
# Required for production. Falls back to local SQLite if empty.
# Get this from Supabase Dashboard -> Database -> Connection String (URI)
DATABASE_URL=postgresql+asyncpg://postgres.[your-project]:[password]@aws-0-ap-south-1.pooler.supabase.com:6543/postgres

# --- Authentication & Storage (Supabase) ---
# Get these from Supabase Dashboard -> Project Settings -> API
SUPABASE_URL=https://[your-project].supabase.co
# Required for verifying JWT tokens
SUPABASE_JWT_SECRET=your_jwt_secret
# Required for uploading PDFs to storage (Service Role Key)
SUPABASE_SERVICE_KEY=your_service_role_key

# ==========================================
# LLM PROVIDERS (At least ONE is required)
# ==========================================
GOOGLE_API_KEY=
GROQ_API_KEY=
XAI_API_KEY=
OPENROUTER_API_KEY=
CEREBRAS_API_KEY=

# ==========================================
# OPTIONAL CONFIGURATION
# ==========================================

# --- Email (Resend — HTTP-based, works on HF Spaces) ---
# Get your API key from https://resend.com/api-keys
RESEND_API_KEY=re_xxxxxxxxxxxx
# Override sender address once you verify policyeye.app domain in Resend
# MAIL_FROM=PolicyEye <noreply@policyeye.app>

# --- Cloudflare AI Gateway ---
CLOUDFLARE_ACCOUNT_ID=
CLOUDFLARE_GATEWAY_NAME=

# --- Caching ---
ENABLE_CACHE=true