.env.production.example

# =============================================================
# API-Watch — Production Environment Variables
# Copy this file: cp .env.production.example .env.production
# Fill in values and NEVER commit .env.production to git
# =============================================================

# ── Required ─────────────────────────────────────────────────

# PostgreSQL connection (matches docker-compose.prod.yml services)
DATABASE_URL=postgresql+asyncpg://apiwatch:CHANGE_ME_STRONG_PASSWORD@postgres:5432/apiwatch
POSTGRES_USER=apiwatch
POSTGRES_PASSWORD=CHANGE_ME_STRONG_PASSWORD
POSTGRES_DB=apiwatch

# JWT secret — generate with: openssl rand -hex 32
JWT_SECRET_KEY=CHANGE_ME_GENERATE_WITH_OPENSSL

# Redis connection (matches docker-compose.prod.yml services)
REDIS_URL=redis://redis:6379/0

# ── Recommended ──────────────────────────────────────────────

# CORS — set to your production domain
CORS_ALLOWED_ORIGINS=https://your-domain.com

# Server
PORT=8000
LOG_LEVEL=INFO
DEBUG=false

# Gunicorn workers — recommended: (2 × CPU cores) + 1
GUNICORN_WORKERS=2
GUNICORN_TIMEOUT=120

# ── Database Pool ────────────────────────────────────────────

DB_POOL_SIZE=10
DB_MAX_OVERFLOW=20
DB_POOL_TIMEOUT=30

# ── Rate Limiting ────────────────────────────────────────────

RATE_LIMIT_ENABLED=true
RATE_LIMIT_DEFAULT=100
RATE_LIMIT_AUTH=5
RATE_LIMIT_WINDOW=60

# ── Auth Tokens ──────────────────────────────────────────────

ACCESS_TOKEN_EXPIRE_MINUTES=30
REFRESH_TOKEN_EXPIRE_DAYS=7

# ── Frontend Build Arg (used during docker build only) ───────

VITE_API_URL=https://your-domain.com