# windy-git — copy to .env. NEVER commit the real file.
# Providers fail CLOSED (I-8): leave a credential unset and that provider
# reports itself unconfigured rather than answering from a mock.

ENVIRONMENT=development
PORT=8600

DATABASE_URL=postgresql+asyncpg://windygit:windygit@localhost:5432/windygit

# Gitea — a COMPONENT behind an API membrane, never a merged tree (D-2/I-1)
GITEA_BASE_URL=http://localhost:3000
GITEA_ADMIN_TOKEN=

# Cloudflare R2 — heavy bytes ONLY. Never git object stores (I-3).
R2_ACCOUNT_ID=193b347aedeaafe35de0b5a534b2d9aa
R2_ACCESS_KEY_ID=
R2_SECRET_ACCESS_KEY=
R2_BUCKET_LFS=windy-git-lfs
R2_BUCKET_ARTIFACTS=windy-git-artifacts
R2_BUCKET_BACKUPS=windy-git-backups

# Eternitas — the one issuer
ETERNITAS_BASE_URL=https://api.eternitas.ai
ETERNITAS_PLATFORM_API_KEY=

# account-server OIDC — human identity
ACCOUNT_SERVER_BASE_URL=https://account.windyword.ai

# I-3: git object databases live on a POSIX filesystem, full stop.
GIT_DATA_ROOT=/srv/windygit/git

# COMMIT_SHA is deliberately NOT here. Setting it does nothing — the sha is
# baked into the image at build time and a runtime override is ignored (I-12).