.env.example

# Legacy encryption key for credit card data (base64 encoded 32-byte key)
# NOTE: Only used when USE_KEK_DEK=false. When KEK/DEK is enabled, keys are managed automatically.
# Generate with: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
ENCRYPTION_KEY=your-256-bit-base64-encoded-key-here

# Token format configuration
# Options:
# - "prefix" (default): Generates tokens like "tok_abc123..." 
# - "luhn": Generates tokens that look like valid credit cards (9999xxxxxxxxxxxx)
TOKEN_FORMAT=prefix

# KEK/DEK encryption (Key Encryption Key / Data Encryption Key)
# Options:
# - "false" (default): Use simple Fernet encryption
# - "true": Use KEK/DEK with key rotation support
USE_KEK_DEK=false

# Your application endpoint where tokenized requests will be forwarded
APP_ENDPOINT=http://dummy-ecommerce-app:8000

# MySQL settings (optional, defaults are in docker-compose.yml)
MYSQL_ROOT_PASSWORD=rootpassword123
MYSQL_DATABASE=tokenshield
MYSQL_USER=pciproxy
MYSQL_PASSWORD=pciproxy123