.env.example

# Code Interpreter API Configuration
# Only settings you're likely to change are listed here.
# All other settings have sensible defaults — see docs/CONFIGURATION.md for the full list.

# ── Authentication ──────────────────────────────────────────────
API_KEY=your-secure-api-key-here-change-this-in-production
# API_KEYS=key1,key2,key3  # Additional API keys (comma-separated)
# MASTER_API_KEY=your-secure-master-key  # Required for admin dashboard CLI

# ── Redis ───────────────────────────────────────────────────────
REDIS_HOST=localhost
REDIS_PORT=6379
# REDIS_PASSWORD=
# REDIS_URL=redis://localhost:6379/0  # Alternative to individual settings

# ── MinIO / S3 ─────────────────────────────────────────────────
MINIO_ENDPOINT=localhost:9000
MINIO_ACCESS_KEY=minioadmin
MINIO_SECRET_KEY=minioadmin
# MINIO_SECURE=false
# MINIO_BUCKET=code-interpreter-files

# ── Execution Limits ───────────────────────────────────────────
# MAX_EXECUTION_TIME=30    # Seconds (default: 30)
# MAX_MEMORY_MB=512        # Per-execution memory limit

# ── Sandbox Pool (Python REPL) ─────────────────────────────────
# SANDBOX_POOL_ENABLED=true
# SANDBOX_POOL_PY=5        # Number of pre-warmed Python REPLs
# SANDBOX_POOL_PARALLEL_BATCH=1  # Safer on busy multi-tenant hosts
# REPL_ENABLED=true
# SANDBOX_UID=1002         # Shared host UID for all sandbox languages

# ── Port ──────────────────────────────────────────────────────
# PORT=8000                # External host port published by docker compose

# ── SSL/HTTPS ──────────────────────────────────────────────────
# HTTPS works the same with docker-compose.yml and docker-compose.prod.yml:
# 1. SSL_CERTS_PATH is a host path mounted to /app/ssl inside the container
# 2. SSL_CERT_FILE and SSL_KEY_FILE must be container paths under /app/ssl
#
# Simple local/self-managed cert directory:
# PORT=443
# ENABLE_HTTPS=true
# SSL_CERTS_PATH=./ssl
# SSL_CERT_FILE=/app/ssl/fullchain.pem
# SSL_KEY_FILE=/app/ssl/privkey.pem
#
# Let's Encrypt on the host:
# PORT=443
# ENABLE_HTTPS=true
# SSL_CERTS_PATH=/etc/letsencrypt
# SSL_CERT_FILE=/app/ssl/live/example.com/fullchain.pem
# SSL_KEY_FILE=/app/ssl/live/example.com/privkey.pem

# ── Logging ────────────────────────────────────────────────────
# LOG_LEVEL=INFO             # INFO = clean (1 log per execution); DEBUG = full detail
# LOG_FORMAT=json            # json (structured) or text (human-readable, colored)
# ENABLE_ACCESS_LOGS=false   # Set true to enable uvicorn per-request access logs