.env.example

# Web app auth
APP_SECRET_KEY=change-me
APP_USER=Test
APP_PASSWORD=Test123!
# Or use APP_USERS='{"alice":"password1","bob":"password2"}'

# Policy Q&A LLM
OPENAI_API_KEY=

# PostgreSQL
DB_HOST=
DB_PORT=5432
DB_NAME=cal_policy_db
DB_USER=postgres
DB_PASSWORD=

# Optional semantic extraction for adaptive ingestion
USE_LLM_SEMANTIC_EXTRACTION=1
SEMANTIC_EXTRACT_MODEL=gemini-2.0-flash
VERTEX_PROJECT_ID=
VERTEX_LOCATION=us-central1

# Optional BigQuery mirroring for adaptive ingestion publish events
BQ_PROJECT=
BQ_POLICY_DATASET=
BQ_POLICY_EVENTS_TABLE=policy_events
BQ_POLICY_CURRENT_TABLE=policies_current

# Optional local Google credentials for Vertex/BigQuery.
# On Cloud Run/App Hosting, credentials normally come from the attached service account.
# GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account-key.json