.env.example

# AWS Credentials for S3 and OpenSearch access
# Copy this file to .env and fill in your actual credentials
# The .env file should be added to .gitignore to keep credentials secure

AWS_ACCESS_KEY_ID=your_access_key_here
AWS_SECRET_ACCESS_KEY=your_secret_key_here
AWS_REGION=us-east-1

# Database configuration
SQLALCHEMY_DATABASE_URI=sqlite://
# This can be a mysql db
# SQLALCHEMY_DATABASE_URI=mysql+pymysql://root:rootpassword@db:3306/ngs360

# OpenSearch Configuration
OPENSEARCH_HOST=your-opensearch-endpoint.domain.com
OPENSEARCH_PORT=443
# Set to 'true' for production with SSL/TLS enabled, 'false' for local dev
OPENSEARCH_USE_SSL=false
# Set to 'true' to verify SSL certificates in production, 'false' for local dev
OPENSEARCH_VERIFY_CERTS=false
# Optional: Credentials (not needed when security plugin is disabled in docker-compose)
OPENSEARCH_USER=your_opensearch_username
OPENSEARCH_PASSWORD=your_opensearch_password

# Storage System
STORAGE_BACKEND=s3
STORAGE_ROOT_PATH=s3://my-storage-bucket

# AWS Secrets Manager (for production)
# ENV_SECRETS=your-secrets-manager-name