# Hermes Futures Desk V5 safe configuration template.
# Copy to a local .env file only for development. Never commit populated secrets.

# Runtime and persistence
HERMES_HOME=/opt/data
HERMES_DATASET_REPO=
HF_TOKEN=
AUTO_CREATE_DATASET=true
SYNC_INTERVAL=60
MAX_BACKUPS=10

# Dashboard authentication
HERMES_ADMIN_USERNAME=admin
HERMES_ADMIN_PASSWORD=
HERMES_SESSION_SECRET=
HERMES_DASHBOARD_BASIC_AUTH_USERNAME=admin
HERMES_DASHBOARD_BASIC_AUTH_PASSWORD=
HERMES_DASHBOARD_BASIC_AUTH_SECRET=
HERMES_GATEWAY_ENABLED=false
HERMES_MAX_CONCURRENT_SESSIONS=1

# Mandatory fail-closed execution controls
TRADING_MODE=paper
HERMES_EXECUTION_ENABLED=false
HERMES_NONPAPER_EXECUTION_ENABLED=false
FUTURES_EXCHANGE_ID=paper
FUTURES_API_KEY=
FUTURES_API_SECRET=
FUTURES_API_PASSPHRASE=
PAPER_EQUITY_USDT=10000

# Public market-data providers
DS4_BASE_URL=
DS4_TIMEOUT_S=6
DS4_WAKE_TIMEOUT_S=25
DS2_BASE_URL=
DS2_TIMEOUT_S=6
BINANCE_PUBLIC_FALLBACK_ENABLED=true
BINANCE_FUTURES_PUBLIC_BASE_URL=https://fapi.binance.com
BINANCE_FUTURES_TIMEOUT_S=5
BINANCE_FUTURES_MAX_RETRIES=2
BINANCE_KLINE_INTERVAL=5m
BINANCE_KLINE_LIMIT=100
BINANCE_ATR_PERIOD=14
BINANCE_ORDERBOOK_LIMIT=20
BINANCE_OI_PERIOD=5m
KUCOIN_FUTURES_PUBLIC_FALLBACK_ENABLED=true
KUCOIN_FUTURES_PUBLIC_BASE_URL=https://api-futures.kucoin.com
KUCOIN_FUTURES_TIMEOUT_S=5
KUCOIN_FUTURES_MAX_RETRIES=1
FRESHNESS_FUTURE_TOLERANCE_SECONDS=120
HERMES_SYMBOL_CACHE_PATH=/opt/data/futures_symbols_cache.json

# Deterministic analysis
FUTURES_MIN_SIGNAL_SCORE=0.55
FUTURES_MIN_SIGNAL_COMPONENTS=3
FUTURES_MIN_DIRECTION_CONFIRMATIONS=2
FUTURES_STOP_ATR_MULTIPLIER=1.2
FUTURES_TAKE_PROFIT_RR=1.8
FUTURES_MIN_STOP_BPS=20
FUTURES_PLAN_MAX_AGE_SECONDS=20
FUTURES_DEFAULT_LEVERAGE=5

# External advisory (never grants execution authority)
EXTERNAL_AI_ENABLED=true
EXTERNAL_AI_TIMEOUT_SECONDS=8
EXTERNAL_AI_TOTAL_TIMEOUT_SECONDS=15
# Deprecated (ignored): EXTERNAL_AI_PROVIDER_TIMEOUT_SECONDS, EXTERNAL_AI_PROVIDER_ORDER
OPENROUTER_API_KEY=
GOOGLE_API_KEY=

# Telegram (disabled by default)
TELEGRAM_ENABLED=false
TELEGRAM_MODE=webhook
TELEGRAM_PUBLIC_BASE_URL=
TELEGRAM_WEBHOOK_PATH=/api/telegram/webhook
TELEGRAM_WEBHOOK_SECRET=
TELEGRAM_BOOTSTRAP_SECRET=
TELEGRAM_ALLOWED_USER_IDS=
TELEGRAM_BOT_TOKEN=
TELEGRAM_PROXY_URL=
TELEGRAM_RELAY_URL=
TELEGRAM_RELAY_SECRET=
TELEGRAM_STATE_PATH=/opt/data/telegram_state.json
TELEGRAM_ALERTS_ENABLED=false
TELEGRAM_COMMAND_RATE_LIMIT=10
TELEGRAM_SCAN_MAX_SYMBOLS=300
TELEGRAM_SCAN_SHORTLIST_SIZE=20
TELEGRAM_SCAN_RESULT_COUNT=10
TELEGRAM_SCAN_MAX_CONCURRENCY=4

# Optional integrations remain disabled
LINEAR_MCP_ENABLED=false
UNREAL_ENGINE_MCP_ENABLED=false