# ═══════════════════════════════════════════════════════════════
# OpenVibe.Sources — Environment Configuration
# Copy to .env and fill in values.
# In production this lives at /etc/openvibe/sources.env (0600); the systemd unit sets
# NODE_ENV and PORT itself.
# ═══════════════════════════════════════════════════════════════

# Server
PORT=4720
HOST=127.0.0.1
NODE_ENV=development
#BASE_URL=https://sources.openvibe.network

# Identity — OpenVibe.Network signs the service tokens (audience openvibe.sources) callers present.
OV_NETWORK_URL=https://openvibe.network
OV_NETWORK_INTERNAL_URL=http://127.0.0.1:4000
#OV_NETWORK_ISSUER=https://openvibe.network
# The JWKS the service verifies tokens against; by default Network's internal JWKS
# (OV_NETWORK_INTERNAL_URL/api/.well-known/jwks). openvibe-sdk/auth caches it and keeps it fresh.
#OV_NETWORK_JWKS_URL=https://openvibe.network/api/.well-known/jwks

# Per-actor limits (server/api/actor-limits.js): API reads one app or module (app:…, mod:…) may make per
# minute and per hour; past them 429 rate_limited with Retry-After. First-party services (svc:…) are not
# counted on reads; writes (sources.source.manage) have their own numbers (README).
#SOURCES_LIMITS_MINUTE=120
#SOURCES_LIMITS_HOUR=3000

# This service's own principal (svc:sources) — publishes sources.* events (events.event.publish).
OV_OAUTH_CLIENT_ID=sources
OV_OAUTH_CLIENT_SECRET=

# Merchant opt-in pages: the Network OAuth client must be registered with the redirect URI below. BASE_URL decides the
# default; set OV_OAUTH_REDIRECT_URI explicitly if the public host differs. The session cookie is Secure in production.
#OV_OAUTH_REDIRECT_URI=https://sources.openvibe.network/merchant/callback
#OV_OAUTH_SCOPE=profile
#SOURCES_SESSION_SECRET=
#SOURCES_COOKIE_SECURE=1
# Pending proofs: recheck cadence (0 disables the worker pass), expiry, meta page cap, optional DNS servers.
#SOURCES_MERCHANT_RECHECK_MS=600000
#SOURCES_MERCHANT_PENDING_DAYS=14
#SOURCES_MERCHANT_META_MAX_BYTES=1048576
#SOURCES_MERCHANT_META_TIMEOUT_MS=10000
#SOURCES_MERCHANT_DNS_SERVERS=
# The source created after verification: crawl/feed spacing, polling, staleness and crawl limits.
#SOURCES_MERCHANT_CRAWL_MIN_INTERVAL_MS=1000
#SOURCES_MERCHANT_FEED_MIN_INTERVAL_MS=60000
#SOURCES_MERCHANT_POLL_INTERVAL_SEC=3600
#SOURCES_MERCHANT_CRAWL_STALE_AFTER_SEC=86400
#SOURCES_MERCHANT_FEED_STALE_AFTER_SEC=10800
#SOURCES_MERCHANT_MAX_ITEMS=1000
#SOURCES_MERCHANT_MAX_PAGES=5000
#SOURCES_MERCHANT_PAGES_PER_RUN=100
#SOURCES_MERCHANT_RECRAWL_SEC=86400

# Store (PostgreSQL, ADR-035), written by OpenVibe.Host roles/data/add-service.sh sources: the runtime role through
# PgBouncer, the owner on a direct connection (migrations), and Valkey (shared limit counters).
# Without DATABASE_URL, development uses an embedded PGlite database in data/pglite.
DATABASE_URL=
DATABASE_DIRECT_URL=
VALKEY_URL=
VALKEY_PREFIX=

# OpenVibe.Events. The outbox relay runs only when EVENTS_URL is set.
#EVENTS_URL=http://127.0.0.1:4300
#EVENTS_RELAY_INTERVAL_MS=2000

# Ingestion worker (in-process scheduler)
#SOURCES_WORKER=on
#SOURCES_TICK_MS=5000
#SOURCES_MAX_CONCURRENT=4
#SOURCES_MAX_BACKOFF_MS=21600000

# Fetching
#SOURCES_USER_AGENT=Mozilla/5.0 (compatible; OpenVibeBot/1.0; +https://openvibe.network/bot)
#SOURCES_ROBOTS_AGENT=OpenVibeBot,OpenVibeSources
#SOURCES_FETCH_TIMEOUT_MS=20000
#SOURCES_MAX_BYTES=5242880
#SOURCES_MAX_REDIRECTS=5
#SOURCES_ROBOTS_TTL_MS=86400000
# Least time between two requests to one host, whatever a source says.
#SOURCES_HOST_MIN_INTERVAL_MS=1000
#SOURCES_ALLOWED_PORTS=80,443
# Exact hosts/IPs allowed to resolve to private/loopback addresses. Leave EMPTY in production.
#SOURCES_ALLOW_PRIVATE_HOSTS=
#SOURCES_MAX_ITEMS_PER_FETCH=12000

# Data-source keys (D11 owner settings): the admin panel's sources.data_sources namespace wins; this
# is the fallback when no value was entered there. GITHUB_TOKEN is the last fallback (a read-only token:
# 30 search requests a minute instead of 10; the name only, never the value).
#SOURCES_GITHUB_TOKEN=
#GITHUB_TOKEN=

# Source credentials: a registry entry names the variable (auth.env), never the value. Names
# must start with SOURCES_CRED_. Example (none of the seeds needs one):
#SOURCES_CRED_EXAMPLE_API_KEY=