.env.example

# Core / App
ROUTEFORGE_DEMO_MODE=false
LOG_LEVEL=INFO

# Database (change POSTGRES_PASSWORD before production use)
POSTGRES_DB=routeforge
POSTGRES_USER=routeforge
POSTGRES_PASSWORD=change-me
DATABASE_URL=postgresql+psycopg://routeforge:change-me@postgres:5432/routeforge

# RIPEstat
RIPESTAT_BASE_URL=https://stat.ripe.net/data
RIPESTAT_CACHE_TTL_SECONDS=900
RIPESTAT_TIMEOUT_SECONDS=10
RIPESTAT_MAX_RETRIES=1
RIPESTAT_RETRY_BACKOFF_SECONDS=0.5
RIPESTAT_USE_STALE_CACHE_ON_ERROR=true

# RPKI Provider
RPKI_PROVIDER=ripestat
RPKI_ROUTINATOR_URL=http://routinator:8323
RPKI_LOCAL_JSON_PATH=
RPKI_PROVIDER_TIMEOUT_SECONDS=5
RPKI_FALLBACK_TO_RIPESTAT=true

# BGP Visibility Provider
BGP_VISIBILITY_PROVIDERS=ripestat
BGP_GENERIC_URL_TEMPLATE=
BGP_PROVIDER_TIMEOUT_SECONDS=5
BGP_VISIBILITY_REQUIRE_SOURCE_AGREEMENT=false
BGP_VISIBILITY_MIN_CONFIDENCE=60

# Change / Post-Change
POST_CHANGE_DEFAULT_RECHECK_MINUTES=15,30,60

# Alerts / Webhooks
ALERT_WEBHOOK_ENABLED=false
ALERT_WEBHOOK_URL=
ALERT_WEBHOOK_SECRET=
ALERT_ON_STATUS_CHANGE_ONLY=true
ALERT_WEBHOOK_TIMEOUT_SECONDS=5
ALERT_WEBHOOK_MAX_RETRIES=1

# Security / CORS
# CORS origins (comma-separated list; mainly needed for split frontend/backend deployments)
CORS_ORIGINS=http://localhost:3000,http://127.0.0.1:3000
# Optional. Leave empty for same-origin /api proxy via frontend nginx.
VITE_API_URL=
# Frontend dev proxy target (for `frontend/vite` local development)
VITE_API_PROXY_TARGET=http://backend:8000
# Optional general HTTP timeout for backend calls
HTTP_TIMEOUT_SECONDS=10
# Auth
SECRET_KEY=change-me
SESSION_COOKIE_NAME=routeforge_session
SESSION_EXPIRE_HOURS=12
COOKIE_SECURE=false