# OpenVibe.Help — environment (production: /etc/openvibe/help.env). Names only; never commit values.

NODE_ENV=production
PORT=5020
HOST=127.0.0.1
BASE_URL=https://openvibe.help
TRUST_PROXY=2
# PostgreSQL (ADR-035), written by OpenVibe.Host roles/data/add-service.sh help: the runtime role through PgBouncer,
# the owner on a direct connection (migrations), and Valkey (shared limit counters).
# Without DATABASE_URL, development uses an embedded PGlite database in data/pglite.
DATABASE_URL=
DATABASE_DIRECT_URL=
VALKEY_URL=
VALKEY_PREFIX=ov:help:
# Per-caller limits (server/http/caller-limits.js): requests one caller may make to the API per minute and per hour.
#HELP_LIMITS_MINUTE=120
#HELP_LIMITS_HOUR=3000

# OpenVibe.Network: SSO (OAuth client `help`, PKCE S256) and its JWKS; app tokens for audience openvibe.help.
OV_NETWORK_URL=https://openvibe.network
OV_NETWORK_INTERNAL_URL=http://127.0.0.1:4000
# The network's public status page a site that is not serving links to (defaults to OV_NETWORK_URL/status).
#HELP_STATUS_URL=https://openvibe.network/status
OV_OAUTH_CLIENT_ID=help
OV_OAUTH_CLIENT_SECRET=
# OV_OAUTH_REDIRECT_URI=https://openvibe.help/auth/callback
# HELP_AUDIENCE=openvibe.help

# OpenVibe.Search: the public query API /search asks for the "From across OpenVibe" half of a search. This is the
# only host /search ever calls; a person's query is a parameter, never a URL. Answers are cached in this process
# for HELP_SEARCH_CACHE_MS, and a failure degrades the page to the help articles alone.
#HELP_SEARCH_URL=https://search.openvibe.network
#HELP_SEARCH_LIMIT=8
#HELP_SEARCH_TIMEOUT_MS=2500
#HELP_SEARCH_CACHE_MS=300000

# OpenVibe.Events → Help (ADR-033 account export and deletion): the secret signs a delivery (comma-separated for
# rotation, 32+ characters each; unset makes POST /internal/events answer 503); the url is where the two subscriptions
# are created at boot (off when unset); HELP_EVENTS_SUBSCRIBE=0 turns that off.
HELP_EVENTS_SECRET=
HELP_EVENTS_URL=
#HELP_EVENTS_ENDPOINT=http://127.0.0.1:5020/internal/events

# optional: defaults to true in production
# COOKIE_SECURE=true