Backend/.env.development at main · Neurowealth/Backend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
```env
# ============================================================
# Application Configuration
# ============================================================

# Runtime environment.
# "development" enables development-specific behavior and settings.
NODE_ENV=development

# Port on which the backend API runs.
PORT=3000


# ============================================================
# CORS Configuration
# ============================================================

# Comma-separated list of frontend origins allowed to access
# the backend API during local development.
CORS_ALLOWED_ORIGINS=http://localhost:3000,http://localhost:3001,http://localhost:5173

# Maximum amount of time, in seconds, that browsers can cache
# CORS preflight responses.
CORS_MAX_AGE=3600

# Allow credentials such as cookies and authorization headers
# in cross-origin requests.
CORS_ALLOW_CREDENTIALS=true


# ============================================================
# Database Configuration
# ============================================================

# PostgreSQL connection string for the development database.
DATABASE_URL=postgresql://dev_user:dev_password@localhost:5432/neuro_backend_dev

# PostgreSQL database host.
DB_HOST=localhost

# PostgreSQL database port.
DB_PORT=5432

# PostgreSQL database username.
DB_USER=dev_user

# PostgreSQL database password.
# Use a local development password only.
DB_PASSWORD=dev_password

# Name of the development PostgreSQL database.
DB_NAME=neuro_backend_dev


# ============================================================
# Authentication / JWT Configuration
# ============================================================

# Secret used to sign and verify JWT access tokens.
# Use a strong secret even in development.
JWT_SECRET=dev-jwt-secret-key

# Lifetime of JWT access tokens.
JWT_EXPIRY=24h

# Separate secret used to sign and verify refresh tokens.
REFRESH_TOKEN_SECRET=dev-refresh-secret


# ============================================================
# AI / External API Configuration
# ============================================================

# Anthropic API key used by the application for AI functionality.
# Replace the development placeholder with a valid API key when needed.
ANTHROPIC_API_KEY=sk-dev-anthropic-key

# OpenAI API key used by the application for OpenAI functionality.
# Replace the development placeholder with a valid API key when needed.
OPENAI_API_KEY=sk-dev-openai-key

# Brian API key for Brian-related integrations.
# Add a valid development key if the integration is enabled.
# BRIAN_API_KEY=get_from_brianknows.org


# ============================================================
# Logging Configuration
# ============================================================

# Log level for development.
# "debug" provides detailed information useful during development.
LOG_LEVEL=debug

# Output logs as structured JSON.
LOG_FORMAT=json


# ============================================================
# HTTP / Server Configuration
# ============================================================

# Maximum amount of time the server waits for an HTTP request
# before timing out, in milliseconds.
SERVER_TIMEOUT=30000

# Maximum size allowed for incoming HTTP request bodies.
MAX_REQUEST_SIZE=10mb
```