# Portable deployment example. Keep this file secret-free; supply SESSION_SECRET via a secret manager.
APP_ENV=production
LOG_LEVEL=INFO
API_PORT=8000
WEB_PORT=8080
CORS_ORIGINS=https://your-approved-web-origin.example
DATA_DIR=/data
# Required in production; generate at least 32 random characters outside this file.
SESSION_SECRET=
# Mandatory for first-run administrator provisioning. Remove both after bootstrap.
BOOTSTRAP_ADMIN_EMAIL=
BOOTSTRAP_ADMIN_PASSWORD=
# Hard safety default; this release has no delivery capability.
AUTOMATED_OUTREACH_ENABLED=false
# Optional criteria-first Nous Portal AI web research. The model uses strict
# web_search/scrape_website tools through an approved Firecrawl-compatible API.
# Only structured HTTPS targets are returned; the server crawler validates and
# persists evidence. Both credentials are server-side only.
# AI_RESEARCH_PROVIDER=nous_portal
# NOUS_MODEL=Hermes-4-405B
# NOUS_BASE_URL=https://inference-api.nousresearch.com/v1
# NOUS_ALLOWED_HOSTS=inference-api.nousresearch.com
# NOUS_API_KEY=<Nous Portal API key; secret-manager only>
# FIRECRAWL_BASE_URL=https://api.firecrawl.dev/v1
# FIRECRAWL_ALLOWED_HOSTS=api.firecrawl.dev
# FIRECRAWL_API_KEY=<Firecrawl API key; secret-manager only>
AI_RESEARCH_PROVIDER=
NOUS_API_KEY=
NOUS_MODEL=Hermes-4-405B
NOUS_BASE_URL=https://inference-api.nousresearch.com/v1
NOUS_ALLOWED_HOSTS=inference-api.nousresearch.com
FIRECRAWL_API_KEY=
FIRECRAWL_BASE_URL=https://api.firecrawl.dev/v1
FIRECRAWL_ALLOWED_HOSTS=api.firecrawl.dev
# Legacy provider settings (only used by compatibility adapters).
AI_RESEARCH_PROVIDER_MODEL=
AI_RESEARCH_PROVIDER_URL=
AI_RESEARCH_PROVIDER_ALLOWED_HOSTS=
AI_RESEARCH_PROVIDER_API_KEY=
OPENAI_API_KEY=
# Deprecated migration-only generic URL search adapter; not used by the AI workflow.
SEARCH_PROVIDER_URL=
SEARCH_PROVIDER_ALLOWED_HOSTS=
SEARCH_PROVIDER_API_KEY=
# Backup operations (host-side, never mounted into the web container).
BACKUP_DIR=/var/backups/prospect-platform
BACKUP_RETENTION=30