.env.example

# Clinisync environment configuration
# Copy this file to `.env` and edit values for your deployment.
# `.env` is gitignored — never commit real secrets.

# HTTP port the server binds to. Default: 3000
PORT=3000

# Required in production. When set, /upload requires
#   Authorization: Bearer <key>   OR   X-API-Key: <key>
# When unset, /upload is unauthenticated (with a startup warning) — dev only.
CLINISYNC_API_KEY=

# How long generated CSVs in csvs/ are retained before being swept on the next upload.
# Default: 24 hours.
CLINISYNC_CSV_TTL_HOURS=24

# Optional. When set, the per-IP rate limiter uses Redis instead of in-memory state,
# so limits are coordinated across multiple Node processes.
# Requires `npm install ioredis`.
# Example: redis://default:password@localhost:6379
REDIS_URL=

# Optional. Path to a JSON rule set that overrides the default cleaning rules.
# When set, every /upload and /preview request runs against this rule set instead of
# the healthcare-friendly defaults baked into src/etl/rules.js.
# The file is loaded once at server startup and cached; restart to reload.
# Schema documentation: docs/docs/cleaning/fields.md
# CLINISYNC_RULES_PATH=./rules.json

# Optional. When set, every uploaded file is scanned by ClamAV (clamd over TCP) before ETL.
# Infected files are deleted and the request returns 422.
# Requires `npm install clamscan` and a reachable clamd daemon.
# CLAMAV_TCP_HOST=clamav.internal
# CLAMAV_TCP_PORT=3310