# Falah OS v1.3 — Environment Variables
# Copy to .env and fill in all values before running.
# Generate secrets with: openssl rand -base64 32

# =============================================================================
# REQUIRED — must be set before starting
# =============================================================================

# JWT signing secret — min 32 random characters
JWT_SECRET=

# Encryption key for sensitive data — min 32 random characters
ENCRYPTION_KEY=

# Admin secret for privileged operations
ADMIN_SECRET=

# PostgreSQL password
POSTGRES_PASSWORD=

# Redis password
REDIS_PASSWORD=

# iBaaS API Key for EE Gateway
IBAAS_API_KEY=falah-os-ibaas-key-2026

# =============================================================================
# OPTIONAL — have sensible defaults
# =============================================================================

NODE_ENV=production

# Domain name and protocol for URL generation
DOMAIN=
PROTOCOL=https

# Protocol fee taken by Falah OS (default 1.5%)
PROTOCOL_FEE_PERCENT=1.5

# Shariah rules enforced by RAMZ (comma-separated, no spaces)
SHARIAH_RULES=NO_RIBA,NO_GHARAR,NO_MAYSIR,HALAL_COMMODITY,ASSET_BACKED,MUTUAL_CONSENT,NO_BAI_INAH

# Set to true only in a controlled test environment
ENABLE_CHAOS_TESTING=false

# =============================================================================
# LOGGING (optional)
# =============================================================================

LOG_LEVEL=info
LOG_FORMAT=json

# =============================================================================
# POSTGRES (optional overrides)
# =============================================================================

POSTGRES_USER=postgres
POSTGRES_HOST=postgres
POSTGRES_PORT=5432
# Derived from the above; override per-service database name as needed
DATABASE_URL=postgresql://postgres:${POSTGRES_PASSWORD}@postgres:5432/falahdb

# =============================================================================
# REDIS (optional overrides)
# =============================================================================

REDIS_HOST=redis
REDIS_PORT=6379

# =============================================================================
# FEATURE FLAGS (optional)
# =============================================================================

ENABLE_MOCKNET=false
ENABLE_DEBUG=false

# =============================================================================
# MONITORING (optional)
# =============================================================================

GRAFANA_PASSWORD=
ALERT_EMAIL=
SLACK_WEBHOOK_URL=

# =============================================================================
# BACKUP (optional)
# =============================================================================

BACKUP_DIR=/backups
S3_BUCKET=
RETENTION_DAYS=30