.env.example

# ── Environment ────────────────────────────────────────────────────────────
ENVIRONMENT=development
# IMPORTANT: Change this to a long random string in production!
SECRET_KEY=change-me-in-production

# ── Database ────────────────────────────────────────────────────────────────
DATABASE_URL=postgresql+asyncpg://tokenbudget:localdev@localhost:5432/tokenbudget
DB_POOL_SIZE=20
DB_MAX_OVERFLOW=10
DB_POOL_RECYCLE=3600

# ── Redis ───────────────────────────────────────────────────────────────────
REDIS_URL=redis://localhost:6379

# ── Signup kill switch ──────────────────────────────────────────────────────
# Set to false to disable new account/key creation (e.g., maintenance mode)
SIGNUPS_ENABLED=true
SIGNUPS_PAUSED_MESSAGE=New signups are temporarily paused. Check back soon.

# ── Free tier limits ────────────────────────────────────────────────────────
FREE_EVENTS_PER_MONTH=10000
FREE_KEYS_MAX=3
FREE_RETENTION_DAYS=30
FREE_PROJECTS_MAX=3

# ── Pro tier limits ─────────────────────────────────────────────────────────
PRO_EVENTS_PER_MONTH=500000
PRO_KEYS_MAX=20
PRO_RETENTION_DAYS=365
PRO_PROJECTS_MAX=50

# ── Team tier limits ─────────────────────────────────────────────────────────
TEAM_EVENTS_PER_MONTH=5000000
TEAM_KEYS_MAX=100
TEAM_RETENTION_DAYS=730
TEAM_PROJECTS_MAX=500

# ── Rate limiting ────────────────────────────────────────────────────────────
RATE_LIMIT_EVENTS_PER_SECOND=100
RATE_LIMIT_BURST=200

# ── CORS ─────────────────────────────────────────────────────────────────────
# JSON array syntax required for pydantic-settings list parsing
CORS_ORIGINS=["http://localhost:5173","http://localhost:3000"]

# ── Admin ─────────────────────────────────────────────────────────────────────
# Required for /api/admin/* endpoints. Leave empty to disable.
ADMIN_KEY=change-this-admin-key

# ── Nightly purge job ─────────────────────────────────────────────────────────
PURGE_ENABLED=true
PURGE_BATCH_SIZE=5000
# Hour and minute (UTC) for the nightly purge cron
PURGE_CRON_HOUR=3
PURGE_CRON_MINUTE=0

# ── Clerk Auth (get keys from https://clerk.com) ──────────────────────────────
# When CLERK_SECRET_KEY is set, the dashboard accepts Clerk session JWTs
# in addition to the existing tb_ak_ API key flow (which always works).
# Leave both empty to rely solely on API key auth (the current default).
CLERK_SECRET_KEY=sk_test_REPLACE_ME
VITE_CLERK_PUBLISHABLE_KEY=pk_test_REPLACE_ME

# ── Stripe ───────────────────────────────────────────────────────────────────
STRIPE_SECRET_KEY=

# ── Frontend ──────────────────────────────────────────────────────────────────
VITE_API_URL=http://localhost:8000