.env.example

APP_PORT=8080

CCF_DB_DRIVER="postgres"
CCF_DB_CONNECTION="host=db user=postgres password=postgres dbname=ccf port=5432 sslmode=disable"

CCF_JWT_SECRET="some-secret"
CCF_JWT_PRIVATE_KEY=private.pem
CCF_JWT_PUBLIC_KEY=public.pem
# To use in-memory key generation, remove/comment out both CCF_JWT_PRIVATE_KEY and CCF_JWT_PUBLIC_KEY lines.
# Do not set these variables to empty strings.

CCF_API_ALLOWED_ORIGINS="http://localhost:3000,http://localhost:8000"
CCF_RISK_CONFIG="risk.yaml"

CCF_SLACK_ENABLED=false
# Slack token generated from https://api.slack.com/apps, with "chat:write" scope.
CCF_SLACK_TOKEN="xxxx"
# DEPRECATED:
# Legacy one-time migration source for the initial Slack digest destination row in ccf_system_notification_destinations.
CCF_SLACK_DIGEST_CHANNEL="my_slack_channel"
# Slack OAuth account-linking config.
CCF_SLACK_CLIENT_ID=""
CCF_SLACK_CLIENT_SECRET=""
# Redirect URL must match Slack app configuration exactly. Must be running on HTTPS due to Slack requirements.
CCF_SLACK_REDIRECT_URL="https://localhost:8443/api/auth/slack/link/callback"

CCF_ENVIRONMENT="" # Defaults to production. 
## This configuration disables cookie setting to allow testing on Safari
## It is insecure so use it with caution
#CCF_ENVIRONMENT="local"

# AI configuration (disabled by default)
CCF_AI_ENABLED=false
CCF_AI_PROVIDER="anthropic"
CCF_AI_API_KEY=""
CCF_AI_MODEL="claude-opus-4-8"
CCF_AI_BASE_URL=""
CCF_AI_REQUEST_TIMEOUT="120s"
CCF_AI_MAX_CONTROLS_PER_CHUNK=40
CCF_AI_MAX_LABEL_SETS_PER_CHUNK=200
CCF_AI_QUEUE_WORKERS=4
CCF_AI_MAX_CALLS_PER_RUN=0
CCF_AI_MAX_SUGGESTIONS_PER_RUN=500

# Pprof debugging (disabled by default)
# Enable this for profiling during load tests
CCF_PPROF_ENABLED=false
CCF_PPROF_PORT=6060