# LSH Shell - Environment Configuration (DEPRECATED for LSH config)
#
# ⚠️  IMPORTANT: LSH configuration should now be in ~/.config/lsh/lshrc
#
# Use: lsh config              # Edit configuration
#      lsh config set KEY val  # Set individual values
#
# This .env.example file is kept for reference and backward compatibility.
# For new installations, use: lsh config init
#
# Priority: Environment variables > ~/.config/lsh/lshrc > defaults
#
# Use .env files ONLY for application secrets, NOT for LSH configuration

# Core Configuration
USER=your_username
HOME=/home/your_username
HOSTNAME=localhost
NODE_ENV=development

# Daemon & API Configuration
LSH_API_ENABLED=false
LSH_API_PORT=3030
LSH_API_KEY=
LSH_JWT_SECRET=
LSH_ENABLE_WEBHOOKS=false
WEBHOOK_PORT=3033
MONITORING_API_PORT=3031

# Command Security
# WARNING: Only enable if you fully trust all job sources
LSH_ALLOW_DANGEROUS_COMMANDS=false

# Webhook Secrets (REQUIRED in production if webhooks enabled)
GITHUB_WEBHOOK_SECRET=
GITLAB_WEBHOOK_SECRET=
JENKINS_WEBHOOK_SECRET=

# Database Configuration
DATABASE_URL=postgresql://localhost:5432/cicd

# Supabase (REQUIRED for SaaS Platform, optional otherwise)
SUPABASE_URL=
SUPABASE_ANON_KEY=

# Redis (Optional)
REDIS_URL=redis://localhost:6379

# MCLI Integration
MCLI_URL=http://localhost:8000
MCLI_API_KEY=

# Data Archival (Optional)
ENABLE_ARCHIVE=false
ARCHIVE_S3_BUCKET=
ARCHIVE_LOCAL_PATH=/var/backups/cicd

# ============================================================================
# SaaS Platform Configuration
# ============================================================================

# SaaS API Server
LSH_SAAS_API_PORT=3031
LSH_SAAS_API_HOST=0.0.0.0
LSH_CORS_ORIGINS=http://localhost:3000,http://localhost:3031

# Master Encryption Key (REQUIRED - for encrypting team encryption keys)
# Generate with: openssl rand -hex 32
LSH_MASTER_KEY=
# Alternative: use existing secrets key
# LSH_SECRETS_KEY=

# Email Service (Resend)
RESEND_API_KEY=
EMAIL_FROM=noreply@yourdomain.com
BASE_URL=https://app.yourdomain.com

# Stripe Billing
STRIPE_SECRET_KEY=
STRIPE_WEBHOOK_SECRET=
STRIPE_PRICE_PRO_MONTHLY=
STRIPE_PRICE_PRO_YEARLY=
STRIPE_PRICE_ENTERPRISE_MONTHLY=
STRIPE_PRICE_ENTERPRISE_YEARLY=

# Security Notes:
# - Generate secrets: openssl rand -hex 32
# - Never commit .env file
# - Webhook secrets mandatory in production
# - Rotate keys regularly
# - LSH_MASTER_KEY is critical - keep it secure and backed up