# OpenVibe.Inventory — environment (production: /etc/openvibe/inventory.env). Names only; never commit values.

NODE_ENV=production
PORT=5030
HOST=127.0.0.1
BASE_URL=https://inventory.openvibe.network
# IndexNow: with a key (8–128 letters and digits), pages Search gains or changes are sent to search engines and the
# key is served at /<key>.txt. Unset: off.
#INDEXNOW_KEY=
TRUST_PROXY=2
# PostgreSQL (ADR-035), written by OpenVibe.Host roles/data/add-service.sh inventory: the runtime role through PgBouncer,
# the owner on a direct connection (migrations), and Valkey (shared limit counters).
# Without DATABASE_URL, development uses an embedded PGlite database in data/pglite.
DATABASE_URL=
DATABASE_DIRECT_URL=
VALKEY_URL=
VALKEY_PREFIX=ov:inventory:
# Per-caller limits (server/http/caller-limits.js): requests one caller may make to the API per minute and per hour.
#INVENTORY_LIMITS_MINUTE=120
#INVENTORY_LIMITS_HOUR=3000

# OpenVibe.Network: SSO (OAuth client `inventory`, PKCE S256) and its JWKS; app tokens for audience openvibe.inventory (Network's rule: openvibe.<service>).
OV_NETWORK_URL=https://openvibe.network
OV_NETWORK_INTERNAL_URL=http://127.0.0.1:4000
OV_OAUTH_CLIENT_ID=inventory
OV_OAUTH_CLIENT_SECRET=
# OV_OAUTH_REDIRECT_URI=https://inventory.openvibe.network/auth/callback
# INVENTORY_AUDIENCE=openvibe.inventory

# optional: defaults to true in production
# COOKIE_SECURE=true

# OpenVibe.Events: the outbox relay publishes inventory.item.* and inventory.definition.published when EVENTS_URL and
# OV_OAUTH_CLIENT_SECRET are set (otherwise events wait in event_outbox). INVENTORY_EVENTS_SECRET signs the deliveries
# to POST /internal/events (account export and deletion; comma-separated for rotation, 32+ characters each). Unset: the
# route answers 503 and no subscription is created.
#EVENTS_URL=http://127.0.0.1:4300
#EVENTS_RELAY_INTERVAL_MS=2000
#INVENTORY_EVENTS_SECRET=

# The Workshop's images use this service's Network service token for its own tenant in OpenVibe.Media.
# Grant [inventory, media.object.upload, openvibe.media] on namespace inventory in Network. Without
# OV_OAUTH_CLIENT_SECRET, the Workshop says image uploads are not set up yet.
#OV_MEDIA_INTERNAL_URL=http://127.0.0.1:4100