PORT=4000
DATABASE_URL=postgresql://factory:factory@localhost:5432/factory
REDIS_URL=redis://localhost:6379
JWT_SECRET=dev-secret-change-me
ACCESS_TOKEN_TTL=15m
REFRESH_TOKEN_TTL=30d
CORS_ORIGINS=http://localhost:3000
WEB_ORIGIN=http://localhost:3000
# TASK-0131: public origin that SERVES the SSO protocol surface (/saml/*,
# /sso/*, later /scim/*) — the API in two-origin dev (web :3000, api :4000).
# Leave EMPTY for single-origin (reference nginx fronts both under one host).
SSO_ORIGIN=http://localhost:4000
S3_ENDPOINT=http://localhost:9000
S3_REGION=us-east-1
S3_BUCKET=factory-files
S3_ACCESS_KEY=minioadmin
S3_SECRET_KEY=minioadmin
SEARCH_URL=http://localhost:9200
SEARCH_USERNAME=admin
SEARCH_PASSWORD=changeme
AI_API_KEY=
AI_PROVIDER=openai
AI_BASE_URL=
AI_MODEL=gpt-4o-mini
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASS=
WEBHOOK_BASE_URL=http://localhost:4000/api/v1
MASTER_ENCRYPTION_KEY=
RATE_LIMIT_API=100
RATE_LIMIT_AUTH=10