1PORT=4000 2DATABASE_URL=postgresql://factory:factory@localhost:5432/factory 3REDIS_URL=redis://localhost:6379 4JWT_SECRET=dev-secret-change-me 5ACCESS_TOKEN_TTL=15m 6REFRESH_TOKEN_TTL=30d 7CORS_ORIGINS=http://localhost:3000 8WEB_ORIGIN=http://localhost:3000 9# TASK-0131: public origin that SERVES the SSO protocol surface (/saml/*, 10# /sso/*, later /scim/*) — the API in two-origin dev (web :3000, api :4000). 11# Leave EMPTY for single-origin (reference nginx fronts both under one host). 12SSO_ORIGIN=http://localhost:4000 13S3_ENDPOINT=http://localhost:9000 14S3_REGION=us-east-1 15S3_BUCKET=factory-files 16S3_ACCESS_KEY=minioadmin 17S3_SECRET_KEY=minioadmin 18SEARCH_URL=http://localhost:9200 19SEARCH_USERNAME=admin 20SEARCH_PASSWORD=changeme 21AI_API_KEY= 22AI_PROVIDER=openai 23AI_BASE_URL= 24AI_MODEL=gpt-4o-mini 25SMTP_HOST= 26SMTP_PORT=587 27SMTP_USER= 28SMTP_PASS= 29WEBHOOK_BASE_URL=http://localhost:4000/api/v1 30MASTER_ENCRYPTION_KEY= 31RATE_LIMIT_API=100 32RATE_LIMIT_AUTH=10 33