.env.example

# =============================================================================
# NIST 800-218 Compliant Environment Configuration Template
# =============================================================================
#
# Instructions:
# 1. Copy this file to .env: cp .env.example .env
# 2. Replace placeholder values with actual secrets
# 3. NEVER commit .env to version control
#
# =============================================================================

# Application Environment
APP_ENV=development

# Database Configuration
DATABASE_USERNAME=your_database_username_here
DATABASE_PASSWORD=your_secure_database_password_here
DATABASE_URL=postgresql://username:password@localhost:5432/myapp_dev

# Security Secrets (CRITICAL - Use strong values)
JWT_SECRET=replace_with_32_character_minimum_secret_key_for_jwt_signing
API_KEY=your_external_api_key_here
ENCRYPTION_KEY=your_32_character_encryption_key_here

# External Service Authentication
SMTP_USERNAME=your_smtp_username
SMTP_PASSWORD=your_smtp_password
REDIS_PASSWORD=your_redis_password_if_needed

# Development Tools (Optional)
RUST_LOG=info
RUST_BACKTRACE=1

# Security Configuration Overrides
SESSION_TIMEOUT_SECONDS=3600
REQUIRE_MFA=false