.env.example

# LENA Environment Configuration
# Copy this file to .env and customize for your deployment.

# Frontend Configuration
# ----------------------
NEXT_PUBLIC_API_BASE=http://localhost:8000

# Backend Configuration
# ---------------------
# Qdrant vector store connection
LENA_QDRANT_HOST=qdrant
LENA_QDRANT_PORT=6333
LENA_QDRANT_COLLECTION=lena_pilot

# File paths (defaults to project root subdirectories)
LENA_DATA_DIR=./data
LENA_STORAGE_DIR=./storage

# AI model configuration
# ----------------------
LENA_EMBED_MODEL=sentence-transformers/all-MiniLM-L6-v2
# "hf" for Hugging Face generation, "off" for extractive-only mode
LENA_LLM_MODE=hf
LENA_HF_MODEL=HuggingFaceH4/zephyr-7b-beta
LENA_HF_MAX_NEW_TOKENS=256

# Security Configuration
# ----------------------
# Comma-separated list of allowed CORS origins
LENA_CORS_ORIGINS=http://localhost:3000

# OpenAPI docs are disabled by default; enable only in local development.
LENA_ENABLE_DOCS=false

# PII encryption at rest (recommended for any real pilot with escalation emails).
# If unset, escalation PII is stored in plaintext with a warning.
# LENA_ENCRYPTION_KEY=your-fernet-key-here

# Demo instructor login.
# The Docker Compose demo enables these defaults automatically. For direct
# local backend runs, set this to true only for a sandbox/demo environment, or
# replace the username/password with real pilot credentials.
# LENA_INSTRUCTOR_USERNAME=demo
# LENA_INSTRUCTOR_PASSWORD=demo
# LENA_ALLOW_DEFAULT_INSTRUCTOR_CREDS=false

# Endpoint hardening: enable higher-risk endpoints explicitly.
# LENA_ENABLE_INGEST_ENDPOINT=false
# LENA_ENABLE_ADMIN_ENDPOINTS=false
# LENA_ENABLE_EXPORT_ENDPOINT=false
# LENA_ENABLE_PII_EXPORT=false

# Export safety limits (defense-in-depth against abuse).
# LENA_EXPORT_MAX_FILE_BYTES=50000000
# LENA_EXPORT_MAX_RECORDS=200000
# LENA_EXPORT_MAX_COMPONENTS=20

# HTTP hardening (best-effort without auth).
# LENA_TRUSTED_HOSTS=localhost,127.0.0.1
# LENA_MAX_REQUEST_BODY_BYTES=1000000

# Demo seed data (fills storage logs so exports show structure immediately).
# LENA_DEMO_SEED_DATA=false