.env.example

# Copy to `.env` (gitignored — never commit real values) before running `docker-compose up`.
# docker-compose.yml reads these via ${VAR} interpolation.

# SQL Server "sa" password — must satisfy SQL Server's complexity policy (8+ chars, upper+lower+
# digit+symbol) or the sqlserver container will fail its own startup check.
SA_PASSWORD=Str0ng_Local_Only!

# JWT signing key for the Api container — 32+ chars, generate a real random value for anything
# beyond a disposable local stack, e.g.: openssl rand -base64 48
# Never reuse the value below outside a throwaway local run; it is not a secret once it's in a
# repo's history, example file or not.
JWT_SIGNING_KEY=replace-this-with-a-real-random-value-at-least-32-chars-long

# Optional (Release 3, F9/F10, ADR-0013) — the assistant works without these, answering with a
# graceful "not configured" message instead of a real reply (NullAiChatClient/NullEmbeddingClient).
# To use a real provider, uncomment and set the matching *_API_KEY, then add the corresponding
# Ai__ChatProvider / Ai__EmbeddingProvider / Ai__OpenAi__ApiKey / Ai__Anthropic__ApiKey entries to
# docker-compose.yml's api.environment block (left out of docker-compose.yml itself, same as SMTP
# and the cloud Document storage providers — no real key is assumed here).
# OPENAI_API_KEY=sk-...
# ANTHROPIC_API_KEY=sk-ant-...