.env.example

# =====================================================================
#  AI Notebook  -  environment variables
#  Copy this file to ".env" and fill in your real values.
#  NEVER commit the real .env file (it is git-ignored).
# =====================================================================

# --- AI Notebook tiers ------------------------------------------------
# Server-side only. Never expose these keys to browser or Android clients.
GEMINI_API_KEY=your_gemini_api_key_here
OPENROUTER_API_KEY=your_openrouter_api_key_here
GROQ_API_KEY=your_groq_api_key_here
# Default model is gemini-3.8-flash. Set these only to override the defaults.
# GEMINI_MODEL=gemini-3.8-flash
# OPENROUTER_MODEL=openrouter/free
# GROQ_MODEL=openai/gpt-oss-20b
#
# Optional: AI response cache TTL in seconds (default 900 = 15 min).
# AI_CACHE_TTL=900

# --- Telegram bot (required only if you run the bot) ----------------
TELEGRAM_BOT_TOKEN=your_telegram_bot_token_here
# Optional but recommended: a secret to verify webhook calls.
# WEBHOOK_SECRET=some_long_random_string

# --- Web app security (set a strong, stable secret in production) ----
# If unset, a random secret is generated per process (tokens won't
# survive restarts). Set this in production.
JWT_SECRET=change_me_to_a_long_random_secret
# Token lifetime in seconds (default 7 days).
# JWT_TTL_SECONDS=604800

# --- CORS (REQUIRED in production) ----------------------------------
# Comma-separated list of frontend origins allowed to call this API.
# The frontend is on Vercel, the backend on Render/Railway (different
# origins), so this MUST include your Vercel URL.
# *.vercel.app preview URLs and localhost are always allowed automatically.
ALLOWED_ORIGINS=https://your-app.vercel.app

# --- Persistent database path (production) --------------------------
# Point this at a MOUNTED DISK so SQLite data survives restarts, e.g.
# Render disk at /data or Railway volume at /data.
# DB_PATH=/data/ai_notebook.db

# --- Optional tuning -------------------------------------------------
# WEB_CONCURRENCY=2          # gunicorn workers
# FAIL_FAST=1                # abort startup if required vars are missing
# TELEGRAM_ADMIN_ID=123456   # admin id for /api/analytics/dashboard-stats
# RATE_LIMIT=120
# RATE_WINDOW=60