# Environment Configuration
ENVIRONMENT="local"
LOG_LEVEL="DEBUG"

# Change these values if you deploy the backend and frontend
# on any hosting provider with some DNS. Please ensure to 
# provide the URL with scheme like http or https
BACKEND_API_ENDPOINT="http://localhost:8000"
UI_APP_URL="http://localhost:3000"

# Database Configuration
DATABASE_URL="postgresql+asyncpg://postgres:postgres@localhost:5432/postgres"
REDIS_URL="redis://:redissecret@localhost:6379"

# AWS S3 Configuration
ENABLE_AWS_S3="false"
# AWS_ACCESS_KEY_ID=""
# AWS_SECRET_ACCESS_KEY=""
# S3_BUCKET=""
# S3_REGION=""
# --- S3-compatible servers (MinIO, rustfs, Ceph, ...) ---
# Use the S3 backend (ENABLE_AWS_S3=true) against a non-AWS, S3-compatible
# server by overriding the endpoint and signing. Unlike the MinIO backend, the
# S3 backend emits real presigned URLs, so the bucket can stay private.
# S3_ENDPOINT_URL=""        # e.g. https://s3.example.com (blank = AWS default)
# S3_SIGNATURE_VERSION=""   # blank = botocore default; set "s3v4" if the server requires SigV4
# S3_ADDRESSING_STYLE=""    # blank = auto; set "path" if the server / TLS cert requires path-style

# MinIO Configuration if using containerised MinIO instead of
# AWS S3
MINIO_ENDPOINT=localhost:9000
# Full URL (with scheme) that browsers use to reach MinIO. Required.
# Remote deployments behind HTTPS: set to e.g. https://your-server.example.com
MINIO_PUBLIC_ENDPOINT=http://localhost:9000
MINIO_ACCESS_KEY=minioadmin
MINIO_SECRET_KEY=minioadmin
MINIO_BUCKET=voice-audio
MINIO_SECURE=false

# Tracing and Analytics using Langfuse
# Credentials can be set here or per-organization via the UI at /settings.
# Tracing is automatically active when credentials are available.
# LANGFUSE_SECRET_KEY="sk-lf-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
# LANGFUSE_PUBLIC_KEY="pk-lf-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
# LANGFUSE_HOST="https://cloud.langfuse.com"

# TURN Server Configuration (for WebRTC NAT traversal)
# Required for reliable WebRTC connections behind firewalls/NAT
# Uses time-limited credentials (TURN REST API) for security
TURN_HOST=localhost
TURN_SECRET=dograh-turn-secret-change-in-production
# TURN_PORT=3478  # Default: 3478
# TURN_TLS_PORT=5349  # Default: 5349
# TURN_CREDENTIAL_TTL=86400  # Default: 24 hours in seconds