.env.example

# .env.example — copy to .env and fill in real values
# Never commit .env to version control.

POSTGRES_USER=ootils
POSTGRES_PASSWORD=changeme_strong_password_here
POSTGRES_DB=ootils_dev
OOTILS_API_TOKEN=changeme_long_random_token_here
OOTILS_ENABLE_API_DOCS=0
OOTILS_DB_POOL_MIN_SIZE=1
OOTILS_DB_POOL_MAX_SIZE=10
OOTILS_DB_POOL_TIMEOUT_SECONDS=10

# ADR-042 PR-1: fences direct POST /v1/ingest/* for non-legacy callers behind
# the governed daily-run pipeline (Dropbox inbox). Default ON (unset behaves
# like 1) so dev/CI/seed/tests keep working unchanged. In a production
# deployment that runs the governed daily-run pipeline, set this to 0 — the
# legacy OOTILS_API_TOKEN principal (the orchestrator, scripts/ingest_file.py,
# seed/demo TestClient callers) stays exempt regardless of this setting.
OOTILS_DIRECT_INGEST_ENABLED=1