.env.example

# Database Configuration
# Format: postgresql+asyncpg://user:password@host:port/database
DATABASE_URL=postgresql+asyncpg://postgres:postgres@localhost:5432/holmes

# CORS Configuration
# Comma-separated list of allowed origins
CORS_ORIGINS=http://localhost:3000

# Debug Mode
# Set to true for development, false for production
DEBUG=true

# Development API Key (local testing only)
# Enables X-Dev-API-Key header authentication for Swagger UI testing
# Generate a random key: python -c "import secrets; print(secrets.token_urlsafe(32))"
# IMPORTANT: Never set this in production environments
DEV_API_KEY=

# Google Cloud Storage (optional)
# Bucket name for evidence file storage
GCS_BUCKET=

# Service account email for signing GCS download URLs (local development only)
# Required when running with user credentials (gcloud auth application-default login)
# For Cloud Run with workload identity, this is auto-detected
# Your user account needs roles/iam.serviceAccountTokenCreator on this SA
GCS_SIGNING_SERVICE_ACCOUNT=

# Gemini API Configuration (required for agent functionality)
# Get your API key from: https://aistudio.google.com/apikey
GOOGLE_API_KEY=

GOOGLE_MAPS_API_KEY=

# ADK backend toggle: set to TRUE to use Vertex AI instead of AI Studio
GOOGLE_GENAI_USE_VERTEXAI=FALSE