# ═══════════════════════════════════════════════════════════════
# openvibe.deals — environment configuration (names only; never commit values)
# Copy to .env for development. Production: /etc/openvibe/deals.env (0600).
# ═══════════════════════════════════════════════════════════════

# Server
PORT=4840
HOST=127.0.0.1
NODE_ENV=development
# Public origin: canonical URLs, feeds, sitemaps and JSON-LD are built from it
BASE_URL=http://localhost:4840
# Proxy hops that set X-Forwarded-For (Cloudflare → nginx → Node = 2). The abuse controls read the client IP from it.
TRUST_PROXY=2
# Per-actor limits (server/http/actor-limits.js): API reads one caller (a person, a service or app
# acting as itself, else an address) may make per minute and per hour; past them 429 rate_limited with
# Retry-After. Writes have their own numbers, above the abuse controls below (README).
#DEALS_LIMITS_MINUTE=120
#DEALS_LIMITS_HOUR=3000
# How long the sitemaps' and /llms-full.txt's offer and product lists are reused, in ms (production default 600000; 0
# rebuilds on every read, the default elsewhere). Concurrent reads share one build either way.
#DEALS_SITEMAP_TTL_MS=600000
# How long the front page's build is reused, in ms (production default 60000; 0 rebuilds on every read, the default
# elsewhere). Past the window one background rebuild runs and readers keep the last copy for up to three minutes.
#DEALS_HOME_TTL_MS=60000
# How long /hot's first page build is reused, in ms (production default 60000; 0 rebuilds on every read, the default
# elsewhere). The worker rebuilds the front page and /hot before their windows close while it is enabled.
#DEALS_HOT_TTL_MS=60000

# PostgreSQL (ADR-035), written by OpenVibe.Host roles/data/add-service.sh deals: the runtime role through PgBouncer,
# the owner on a direct connection (migrations), and Valkey (shared limit counters).
# Without DATABASE_URL, development uses an embedded PGlite database in data/pglite.
DATABASE_URL=
DATABASE_DIRECT_URL=
VALKEY_URL=
VALKEY_PREFIX=

# OpenVibe.Network — SSO (OAuth2), JWKS, client-credentials tokens
OV_NETWORK_URL=https://openvibe.network
OV_NETWORK_INTERNAL_URL=http://127.0.0.1:4000
# OAuth client `deals` (redirect https://openvibe.deals/auth/callback). The same client is Deals'
# service principal svc:deals for client-credentials grants (see README, "Grants").
OV_OAUTH_CLIENT_ID=deals
OV_OAUTH_CLIENT_SECRET=
# Production: https://openvibe.deals/auth/callback (default: BASE_URL + /auth/callback)
#OV_OAUTH_REDIRECT_URI=
# Cookies: Secure by default in production; set false for plain-http local development
#COOKIE_SECURE=false
# Signs the no-JS form tokens (CSRF). Unset: random per process.
#DEALS_FORM_SECRET=
# Keys the HMAC that turns client IPs into ip hashes (vote limits, ring detection). Unset: random per
# process, so hashes reset on restart (/api/ready reports abuse_keys as degraded).
#DEALS_IP_HASH_SECRET=

# Moderators besides staff with staff.content.moderate (Network global mods and admins): usr_… subjects,
# comma-separated (a product role)
#DEALS_MODERATORS=

# Freshness: an observation older than this is shown as stale and the page is noindex
#DEALS_FRESHNESS_HOURS=48

# Abuse controls (defaults shown)
#DEALS_VOTE_LIMIT_SUBJECT_HOUR=60
#DEALS_VOTE_LIMIT_IP_HOUR=120
#DEALS_VOTE_LIMIT_OFFER_HOUR=6
#DEALS_SUBMIT_LIMIT_DAY=20
#DEALS_OBSERVE_LIMIT_HOUR=30
#DEALS_FLAG_LIMIT_DAY=30
#DEALS_NEW_ACCOUNT_DAYS=7
#DEALS_NEW_ACCOUNT_WEIGHT=0.25
#DEALS_RING_IP_MIN=3
#DEALS_RING_COVOTE_MIN=5
#DEALS_RING_WINDOW_MIN=10
#DEALS_WATCH_LIMIT=50

# OpenVibe.Community — comment threads (referenced, never copied)
# optional: defaults to https://openvibe.community
# OV_COMMUNITY_URL=https://openvibe.community
OV_COMMUNITY_INTERNAL_URL=http://127.0.0.1:4200

# OpenVibe.Sources — deals-category items (needs sources.item.read). DEALS_IMPORT=off disables the importer.
OV_SOURCES_INTERNAL_URL=http://127.0.0.1:4720
#DEALS_IMPORT=on
#DEALS_IMPORT_INTERVAL_MS=300000
#DEALS_IMPORT_PAGE_SIZE=100
#DEALS_IMPORT_MAX_PAGES=10
#DEALS_IMPORT_REFRESH_BATCH=50

# OpenVibe.Events — the outbox relay runs only when EVENTS_URL and OV_OAUTH_CLIENT_SECRET are set
#EVENTS_URL=http://127.0.0.1:4300
#EVENTS_RELAY_INTERVAL_MS=2000
# Webhook secret(s) of Deals' sources.item.* subscription (comma-separated for rotation). Unset: /internal/events answers 503.
#DEALS_EVENTS_SECRET=

# Worker (stated expiry, hotness snapshots, freshness re-indexing, Sources pull); off: DEALS_WORKER=off
#DEALS_WORKER=on
#DEALS_WORKER_INTERVAL_MS=600000
#DEALS_HOT_WINDOW_DAYS=14

# Browser origins that may call /api/v1 with a Bearer Network JWT
#API_CORS_ORIGINS=https://openvibe.network,https://openvibe.live,https://openvibe.community,https://openvibe.coupons

# IndexNow (openvibe-shared/indexnow): 8–128 hex/alphanumeric characters. Set: the key file is served
# at /<key>.txt and an indexable deal or product page appearing, changing or disappearing pings the
# engines. Unset: off, nothing is mounted and nothing is sent.
#INDEXNOW_KEY=

# Data-source keys (D11 owner settings): the admin panel's deals.data_sources namespace wins; these
# are the fallback when no value was entered there.
#WOOT_API_KEY=

# release.json (openvibe-shared/release): the deployed commit when git is not available
#RELEASE_COMMIT=
#MIN_CLIENT_RELEASE=