.env.example

SCRAPER_SCHEDULE_ENABLED=false
SIMILARITY_DEVICE=cpu
SIMILARITY_MIN_RESULTS=10
SCRAPER_MAX_RESULTS=25

# Backend-only AI key. Never expose this as a VITE_* frontend variable.
GROQ_API_KEY=
GROQ_MODEL=llama-3.1-8b-instant

# Password reset is backend-only. Set EMAIL_PROVIDER=smtp outside local development.
PASSWORD_RESET_ENABLED=true
PASSWORD_RESET_CODE_LENGTH=6
PASSWORD_RESET_CODE_TTL_MINUTES=10
PASSWORD_RESET_MAX_ATTEMPTS=5
PASSWORD_RESET_RESEND_COOLDOWN_SECONDS=60
PASSWORD_RESET_MAX_REQUESTS_PER_HOUR=5
PASSWORD_RESET_MAX_REQUESTS_PER_IP=20
PASSWORD_RESET_AUTH_TTL_MINUTES=15
PASSWORD_RESET_REVOKE_SESSIONS=true
PASSWORD_RESET_CODE_SECRET=replace_with_a_long_random_backend_secret
EMAIL_PROVIDER=console
SMTP_HOST=
SMTP_PORT=587
SMTP_USERNAME=
SMTP_PASSWORD=
SMTP_FROM_EMAIL=
SMTP_USE_TLS=true
SMTP_TIMEOUT_SECONDS=10
PASSWORD_RESET_EMAIL_RETRY_ATTEMPTS=2

# Phase 12 RAG memory embeddings. BGE-M3 is preferred when local resources allow it.
RAG_ENABLED=false
RAG_EMBEDDING_PROVIDER=local_bge
RAG_EMBEDDING_MODEL=BAAI/bge-m3
RAG_EMBEDDING_DEVICE=mps
RAG_EMBEDDING_BATCH_SIZE=4
RAG_EMBEDDING_NORMALIZE=true
RAG_EMBEDDING_VERSION=v1
RAG_CHUNKING_VERSION=v1
RAG_MAX_CHUNK_CHARS=1200
RAG_CHUNK_OVERLAP_CHARS=120
RAG_RETRIEVAL_TOP_K=8
RAG_MIN_SIMILARITY=0.25
RAG_PROMPT_VERSION=v1
RAG_GROQ_MODEL=openai/gpt-oss-120b
RAG_UNEMBEDDED_CHUNK_BATCH_SIZE=100
RAG_MEMORY_SCHEDULE_ENABLED=false
RAG_MEMORY_DAILY_HOUR_UTC=3
RAG_MEMORY_DAILY_MINUTE_UTC=30
RAG_OUTBOX_BATCH_SIZE=100
RAG_OUTBOX_MAX_ATTEMPTS=5
RAG_OUTBOX_INITIAL_BACKOFF_SECONDS=60
RAG_OUTBOX_MAX_BACKOFF_SECONDS=3600
RAG_OUTBOX_PROCESSING_LEASE_SECONDS=900

# Frontend API base URL. In local development this usually points to FastAPI.
VITE_API_BASE_URL=http://127.0.0.1:8000/api/v1