# ── Database ─────────────────────────────────────────────────────────────────
# For Docker Compose — only POSTGRES_PASSWORD needs to be set;
# DATABASE_URL is built automatically by docker-compose.yml.
# For local dev without Docker, set DATABASE_URL directly:
# DATABASE_URL=sqlite+aiosqlite:///./trumpsignal.db
POSTGRES_PASSWORD=change_me_in_production

# ── CORS / Frontend ──────────────────────────────────────────────────────────
# Your frontend origin — no trailing slash
FRONTEND_URL=https://yourdomain.com

# ── Encryption ───────────────────────────────────────────────────────────────
# KEK for envelope-encrypting HL API keys in DB.
# Generate: openssl rand -hex 32
# WARNING: rotating this invalidates all stored keys.
ENCRYPTION_KEY=

# ── AI provider ──────────────────────────────────────────────────────────────
AI_API_KEY=
AI_BASE_URL=https://api.gptsapi.net/v1
AI_MODEL=claude-sonnet-4-6

# ── Hyperliquid ──────────────────────────────────────────────────────────────
HL_MAINNET=true

# ── Runtime ──────────────────────────────────────────────────────────────────
# development | production
ENVIRONMENT=production