# Docker Compose - Production Environment Variables

# This file is used by docker-compose.prod.yml

# Copy this to .env on your production machine and customize values

# Server Configuration

PORT=8080

DEBUG=false

ENVIRONMENT=production

LOG_LEVEL=INFO

# API Base URL (for internal HTTP calls between services)

# In Docker: use localhost since backend calls itself in same container

API_BASE_URL=http://localhost:8080

# Redis Configuration (uses service name 'redis' in Docker network)

REDIS_URL=redis://redis:6379/0

# Feature Flags

RUN_SCHEDULER=1

CRYPTO_TOOLBOX_NEW=1

RISK_SCORE_V2_ENABLED=true

# Rate Limiting (token bucket system)

RATE_LIMIT_ENABLED=true

RATE_LIMIT_REQUESTS_PER_MINUTE=60 # Legacy, not used with token bucket

# Token bucket configuration (generous for Docker/LAN)

SECURITY_RATE_LIMIT_REFILL_RATE=10.0 # Tokens per second

SECURITY_RATE_LIMIT_BURST_SIZE=30 # Burst capacity for dashboard loading

# Security Tokens (CHANGE THESE IN PRODUCTION!)

DEBUG_TOKEN=your-secure-debug-token-here

ADMIN_KEY=your-secure-admin-key-here

# Data Sources

ALLOW_STUB_SOURCES=false

COMPUTE_ON_STUB_SOURCES=false

# CORS Origins (comma-separated, optional)

# Example: http://localhost:3000,https://smartfolio.example.com

CORS_ORIGINS=

# Joblib Configuration (Windows compatibility)

LOKY_MAX_CPU_COUNT=4

# Allowed Hosts (comma-separated list of allowed Host headers)

# Use "*" to allow all hosts (recommended for Docker/LAN environments)

# Or specify: localhost,127.0.0.1,192.168.1.200,yourdomain.com

ALLOWED_HOSTS=*

# ============================================================================

# SaxoBank OAuth2 Credentials

# ============================================================================

# Get credentials from: https://www.developer.saxo/openapi/appmanagement

# Simulation Environment (for testing)

SAXO_SIM_CLIENT_ID=your_sim_client_id_here

SAXO_SIM_CLIENT_SECRET=your_sim_client_secret_here

# Live Environment (PRODUCTION - real money!)

SAXO_LIVE_CLIENT_ID=your_live_client_id_here

SAXO_LIVE_CLIENT_SECRET=your_live_client_secret_here

# Active Environment (sim or live)

SAXO_ENVIRONMENT=sim

# OAuth2 Redirect URIs (must match Saxo Developer Portal)

# Update with your production server IP/domain

SAXO_REDIRECT_URI=http://192.168.1.200:8080/api/saxo/callback