.env.example

# ============================================================================
# Cloudflare API Configuration
# ============================================================================
# For managing Cloudflare IP lists, firewall rules, and Access policies.
# Documentation: https://developers.cloudflare.com/api/

# Cloudflare API Token (required for cloudflare-api package)
# Create a token at: https://dash.cloudflare.com/profile/api-tokens
# Required permissions:
#   - Account > Account Filter Lists > Edit (for IP lists)
#   - Account > Account Firewall Access Rules > Edit (for firewall rules)
CLOUDFLARE_API_TOKEN=your-cloudflare-api-token-here

# Cloudflare Account ID (required)
# Find this at: https://dash.cloudflare.com/ (right sidebar)
CLOUDFLARE_ACCOUNT_ID=your-cloudflare-account-id-here

# Cloudflare Zone ID (optional, for zone-scoped operations)
# Find this on your domain's overview page in the dashboard
# CLOUDFLARE_ZONE_ID=your-zone-id-here

# Cloudflare API Settings (optional)
# CF_DEFAULT_LIST_KIND=ip
# CF_REQUEST_TIMEOUT=30
# CF_MAX_RETRIES=3
# CF_BULK_POLL_INTERVAL=1.0
# CF_BULK_TIMEOUT=300

# ============================================================================
# Cloudflare Access Configuration (for cloudflare-auth package)
# ============================================================================
# For JWT validation with Cloudflare Access.
# CLOUDFLARE_TEAM_DOMAIN=your-team.cloudflareaccess.com
# CLOUDFLARE_AUDIENCE_TAG=your-application-audience-tag

# ============================================================================
# Google Cloud - Assured OSS Configuration
# ============================================================================
# Google Assured OSS provides vetted, secure open-source packages.
# This project uses Assured OSS as the primary package source with PyPI fallback.
# Documentation: https://cloud.google.com/assured-open-source-software

# Google Cloud Project ID for Assured OSS
# Find this in your GCP Console: https://console.cloud.google.com
GOOGLE_CLOUD_PROJECT=your-gcp-project-id

# Google Service Account Credentials (Base64 encoded)
# Setup Instructions:
# 1. Create a service account with "Artifact Registry Reader" role
# 2. Download the JSON key file
# 3. Base64 encode it: base64 -w 0 service-account-key.json
# 4. Paste the base64 string below (entire output on one line)
GOOGLE_APPLICATION_CREDENTIALS_B64=YOUR_BASE64_ENCODED_SERVICE_ACCOUNT_JSON_HERE

# Alternatively, use file path (for local development only)
# Uncomment and set path to your service account JSON file
# GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account-key.json

# Google Artifact Registry Repository Name (default: assuredoss)
ASSURED_OSS_REPOSITORY=assuredoss

# Google Artifact Registry Region (us, europe, asia)
# See: https://cloud.google.com/artifact-registry/docs/repositories/repo-locations
ASSURED_OSS_REGION=us

# Enable/disable Assured OSS (set to 'false' to use only PyPI)
USE_ASSURED_OSS=true

# ============================================================================
# AI/ML Service API Keys
# ============================================================================

# OpenRouter API Key (for LLM access)
# Get your API key from: https://openrouter.ai/keys
OPENROUTER_API_KEY=your-openrouter-api-key-here

# OpenRouter Configuration (optional)
OPENROUTER_MODEL=anthropic/claude-3.5-sonnet
OPENROUTER_MAX_TOKENS=4096
OPENROUTER_TEMPERATURE=0.7

# Modal Labs Token (for GPU/serverless compute)
# Get your token from: https://modal.com/settings
MODAL_TOKEN_ID=your-modal-token-id-here
MODAL_TOKEN_SECRET=your-modal-token-secret-here

# Modal Configuration (optional)
MODAL_WORKSPACE=default

# Hugging Face API Token (for model access and inference)
# Get your token from: https://huggingface.co/settings/tokens
HUGGINGFACE_TOKEN=your-huggingface-token-here

# Hugging Face Configuration (optional)
HUGGINGFACE_HUB_CACHE=~/.cache/huggingface
HUGGINGFACE_MODEL_ID=meta-llama/Llama-2-7b-hf

# Google HMAC Keys (for Cloud Storage authentication)
# Generate keys from: https://console.cloud.google.com/storage/settings
# Used for signing requests to Google Cloud Storage
GOOGLE_HMAC_ACCESS_KEY_ID=your-google-hmac-access-key-id
GOOGLE_HMAC_SECRET=your-google-hmac-secret

# Google Cloud Storage Configuration (optional)
GCS_BUCKET_NAME=your-bucket-name
GCS_REGION=us-central1

# ============================================================================
# Project Configuration
# ============================================================================
PROJECT_NAME=Python Libs
PROJECT_ENV=development

# Logging Configuration
LOG_LEVEL=INFO
LOG_FORMAT=json
LOG_FILE=logs/application.log

# Application Settings
DEBUG=False
WORKERS=4

# Database Configuration (if applicable)
# DATABASE_URL=sqlite:///./app.db
# DATABASE_POOL_SIZE=10
# DATABASE_POOL_TIMEOUT=30

# API Configuration (if applicable)
# API_HOST=0.0.0.0
# API_PORT=8000
# API_DEBUG=False
# API_RELOAD=False

# Authentication (if applicable)
# SECRET_KEY=your-secret-key-here
# ALGORITHM=HS256
# ACCESS_TOKEN_EXPIRE_MINUTES=30

# External Services (if applicable)
# EXTERNAL_API_KEY=your-api-key
# EXTERNAL_API_URL=https://api.example.com

# Feature Flags
# ENABLE_FEATURE_X=True
# ENABLE_FEATURE_Y=False

# Performance Tuning
# MAX_WORKERS=10
# TIMEOUT_SECONDS=30
# BATCH_SIZE=32

# Monitoring and Analytics (if applicable)
# ENABLE_METRICS=False

# ============================================================================
# Sentry Error Tracking and Performance Monitoring
# ============================================================================

# Sentry DSN (Data Source Name) - Required for error tracking
# Get your DSN from: https://sentry.io/settings/projects/
# Format: https://<key>@<organization>.ingest.sentry.io/<project-id>
SENTRY_DSN=

# Sentry Environment (e.g., production, staging, development)
# Used to filter errors by environment in Sentry dashboard
SENTRY_ENVIRONMENT=${ENVIRONMENT:-development}

# Sentry Release Version (optional)
# Automatically detected from git SHA or package version if not set
# Format: <package-name>@<version> (e.g., myapp@1.0.0)
# SENTRY_RELEASE=

# Performance Monitoring - Traces Sample Rate (0.0 to 1.0)
# Percentage of transactions to send to Sentry for performance monitoring
# 0.1 = 10% of requests, 1.0 = 100% of requests
# Recommended: 0.1 for production, 1.0 for staging/dev
SENTRY_TRACES_SAMPLE_RATE=0.1

# Profiling - Profiles Sample Rate (0.0 to 1.0)
# Percentage of traces to profile (requires traces to be sampled)
# 0.1 = 10% of sampled traces, 1.0 = 100% of sampled traces
SENTRY_PROFILES_SAMPLE_RATE=0.1

# ============================================================================
# CI/CD and Code Quality Services
# ============================================================================

# Codecov Token (for test coverage reporting)
# Get your token from: https://app.codecov.io/gh/ByronWilliamsCPA/python_libs/settings
# Required for uploading coverage reports to Codecov in CI/CD
# IMPORTANT: Add this to GitHub Secrets as CODECOV_TOKEN
CODECOV_TOKEN=your-codecov-token-here

# SonarCloud Token (for continuous code quality analysis)
# Get your token from: https://sonarcloud.io/account/security
# Required for SonarCloud analysis in CI/CD
# IMPORTANT: Add this to GitHub Secrets as SONAR_TOKEN
SONAR_TOKEN=your-sonarcloud-token-here

# SonarCloud Configuration
SONAR_ORGANIZATION=ByronWilliamsCPA
SONAR_PROJECT_KEY=ByronWilliamsCPA_python_libs

# ============================================================================
# Redis Configuration (Caching & Background Jobs)
# ============================================================================