.env.example

# Copy this file to `.env` and fill in real values:
#   cp .env.example .env
#
# All values below are placeholders. Never commit a real `.env`.

# ---- Required: API authentication ----
# Shared secret used to authenticate requests to the AI/storage APIs.
# Generate a random string (e.g. `openssl rand -hex 32`).
AI_API_AUTH_TOKEN=your-secret-token

# ---- Required: Primary AI provider ----
# Supported values: openai-compatible | openai | anthropic
AI_PROVIDER=openai-compatible
AI_MODEL=deepseek-chat
AI_API_KEY=sk-...
AI_BASE_URL=https://api.deepseek.com/v1

# ---- Optional: Fallback AI provider (used when primary fails) ----
AI_FALLBACK_PROVIDER=openai
AI_FALLBACK_MODEL=gpt-4o-mini
AI_FALLBACK_API_KEY=sk-...
AI_FALLBACK_BASE_URL=https://api.openai.com/v1

# ---- Optional: Trust proxy-forwarded IP headers ----
# Set to "true" ONLY when the app is deployed behind a trusted reverse proxy
# (e.g. nginx, Vercel) that overwrites x-forwarded-for / x-real-ip.
# When false/unset, spoofable headers are ignored for rate limiting.
# TRUST_PROXY=false