.env.prod.example

[TEMPLATE]
# Copy to .env.prod and adjust. NEVER commit the .env.prod file.
# This file is consumed by docker-compose.prod.yml (env_file: ./.env.prod).

# Database (PostgreSQL — managed via docker compose or external cloud)
DATABASE_URL=postgresql+psycopg://gw2analytics:gw2analytics@postgres:5432/gw2analytics

# Object storage (MinIO/S3-compatible — managed via docker compose or external cloud)
S3_ENDPOINT=http://minio:9000
S3_ACCESS_KEY=gw2analytics
S3_SECRET_KEY=change-me-prod-secret-key
S3_BUCKET=gw2analytics

# Fernet key for secrets-at-rest encryption (44 chars base64-url).
# Generate: python3 -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
SECRETS_KEK=YWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWE=

# Application secret key (32-byte hex string for session signing)
# Redis host (arq background task queue). In Docker this is the service name.
ARQ_REDIS_HOST=redis

SECRET_KEY=change-me-to-a-random-32-byte-hex-string

# Maximum compressed .zevtc upload size in bytes (default 100 MiB).
MAX_UPLOAD_SIZE_BYTES=104857600

# Production: do NOT allow in-request parse fallback. The Arq worker
# queue is the only parse path. Set to 0 for production.
ALLOW_INREQUEST_PARSE_FALLBACK=0

# Stuck upload sweeper: how long (seconds) before a "pending" upload
# is considered stuck. Default 650s (~11 min) is generous for large
# WvW logs that may take 5-10 min to parse.
STUCK_SWEEPER_THRESHOLD_S=650

# Stuck sweeper interval: how often (seconds) the sweeper runs.
STUCK_SWEEPER_INTERVAL_S=300

# Failed upload retention: how many days to keep failed/collision
# upload rows before hard-deleting them. Default 90 days.
STUCK_SWEEPER_FAILED_RETENTION_DAYS=90

# Application environment (dev/prod)
ENV=prod