# Foxhunt Production Environment Configuration Template
# Copy this file to production.env and customize for your deployment
# Generated on $(date)

# =============================================================================
# TLS Certificate Configuration
# =============================================================================
# REQUIRED: Set to your certificate directory (e.g., /etc/foxhunt/certs)
FOXHUNT_TLS_CERT_DIR=/etc/foxhunt/certs

# TLS Configuration
FOXHUNT_TLS_ENABLED=true
FOXHUNT_TLS_CA_CERT=${FOXHUNT_TLS_CERT_DIR}/ca/ca-cert.pem
FOXHUNT_TLS_AUTO_GENERATE=false
FOXHUNT_TLS_CERT_VALIDITY_DAYS=365

# =============================================================================
# JWT Authentication Configuration  
# =============================================================================
# REQUIRED: Generate with: openssl rand -base64 64
FOXHUNT_JWT_SECRET=<JWT_SECRET_PLACEHOLDER>
FOXHUNT_JWT_EXPIRATION=3600
FOXHUNT_JWT_ISSUER=foxhunt-hft
FOXHUNT_JWT_AUDIENCE=foxhunt-services

# =============================================================================
# RBAC Configuration
# =============================================================================
FOXHUNT_RBAC_ENABLED=true
FOXHUNT_RBAC_CACHE_TTL=300

# =============================================================================
# Secrets Management Configuration
# =============================================================================
FOXHUNT_SECRETS_BACKEND=filesystem
FOXHUNT_SECRETS_PATH=${FOXHUNT_TLS_CERT_DIR}/secrets
# REQUIRED: Generate with: openssl rand -base64 32
FOXHUNT_SECRETS_ENCRYPTION_KEY=<SECRETS_ENCRYPTION_KEY_PLACEHOLDER>
FOXHUNT_SECRETS_CACHE_TTL=300

# =============================================================================
# Audit and Logging Configuration
# =============================================================================
FOXHUNT_AUDIT_ENABLED=true
FOXHUNT_AUDIT_LOG_TOKEN_VALIDATION=false
FOXHUNT_AUDIT_LOG_LEVEL=info

# =============================================================================
# Service-specific TLS Certificate Paths
# =============================================================================
# These paths are automatically constructed based on FOXHUNT_TLS_CERT_DIR
FOXHUNT_TLS_TRADING_ENGINE_CERT=${FOXHUNT_TLS_CERT_DIR}/services/trading-engine/trading-engine-cert.pem
FOXHUNT_TLS_TRADING_ENGINE_KEY=${FOXHUNT_TLS_CERT_DIR}/services/trading-engine/trading-engine-key.pem
FOXHUNT_TLS_MARKET_DATA_CERT=${FOXHUNT_TLS_CERT_DIR}/services/market-data/market-data-cert.pem
FOXHUNT_TLS_MARKET_DATA_KEY=${FOXHUNT_TLS_CERT_DIR}/services/market-data/market-data-key.pem
FOXHUNT_TLS_PERSISTENCE_CERT=${FOXHUNT_TLS_CERT_DIR}/services/persistence/persistence-cert.pem
FOXHUNT_TLS_PERSISTENCE_KEY=${FOXHUNT_TLS_CERT_DIR}/services/persistence/persistence-key.pem
FOXHUNT_TLS_BROKER_CONNECTOR_CERT=${FOXHUNT_TLS_CERT_DIR}/services/broker-connector/broker-connector-cert.pem
FOXHUNT_TLS_BROKER_CONNECTOR_KEY=${FOXHUNT_TLS_CERT_DIR}/services/broker-connector/broker-connector-key.pem
FOXHUNT_TLS_AI_INTELLIGENCE_CERT=${FOXHUNT_TLS_CERT_DIR}/services/ai-intelligence/ai-intelligence-cert.pem
FOXHUNT_TLS_AI_INTELLIGENCE_KEY=${FOXHUNT_TLS_CERT_DIR}/services/ai-intelligence/ai-intelligence-key.pem
FOXHUNT_TLS_DATA_AGGREGATOR_CERT=${FOXHUNT_TLS_CERT_DIR}/services/data-aggregator/data-aggregator-cert.pem
FOXHUNT_TLS_DATA_AGGREGATOR_KEY=${FOXHUNT_TLS_CERT_DIR}/services/data-aggregator/data-aggregator-key.pem
FOXHUNT_TLS_INTEGRATION_HUB_CERT=${FOXHUNT_TLS_CERT_DIR}/services/integration-hub/integration-hub-cert.pem
FOXHUNT_TLS_INTEGRATION_HUB_KEY=${FOXHUNT_TLS_CERT_DIR}/services/integration-hub/integration-hub-key.pem

# =============================================================================
# Database Configuration
# =============================================================================
# PostgreSQL Configuration
FOXHUNT_DATABASE_URL=postgresql://foxhunt:<DB_PASSWORD_PLACEHOLDER>@<DB_HOST_PLACEHOLDER>:5432/foxhunt
FOXHUNT_DATABASE_POOL_SIZE=20
FOXHUNT_DATABASE_TIMEOUT=30

# InfluxDB Configuration  
FOXHUNT_INFLUXDB_URL=http://localhost:8086
FOXHUNT_INFLUXDB_TOKEN=<INFLUXDB_TOKEN_PLACEHOLDER>
FOXHUNT_INFLUXDB_ORG=foxhunt
FOXHUNT_INFLUXDB_BUCKET=hft-data

# =============================================================================
# Market Data Configuration
# =============================================================================
# Polygon.io API Configuration
FOXHUNT_POLYGON_API_KEY=<POLYGON_API_KEY_PLACEHOLDER>
FOXHUNT_POLYGON_WS_URL=wss://socket.polygon.io/stocks

# =============================================================================
# Service Configuration
# =============================================================================
# Trading Engine
FOXHUNT_TRADING_ENGINE_HOST=0.0.0.0
FOXHUNT_TRADING_ENGINE_PORT=50051

# Market Data
FOXHUNT_MARKET_DATA_HOST=0.0.0.0
FOXHUNT_MARKET_DATA_PORT=50052

# Persistence
FOXHUNT_PERSISTENCE_HOST=0.0.0.0
FOXHUNT_PERSISTENCE_PORT=50053

# AI Intelligence
FOXHUNT_AI_INTELLIGENCE_HOST=0.0.0.0
FOXHUNT_AI_INTELLIGENCE_PORT=50054

# Broker Connector
FOXHUNT_BROKER_CONNECTOR_HOST=0.0.0.0
FOXHUNT_BROKER_CONNECTOR_PORT=50055

# Data Aggregator
FOXHUNT_DATA_AGGREGATOR_HOST=0.0.0.0
FOXHUNT_DATA_AGGREGATOR_PORT=50056

# Integration Hub
FOXHUNT_INTEGRATION_HUB_HOST=0.0.0.0
FOXHUNT_INTEGRATION_HUB_PORT=50057

# =============================================================================
# Performance and Monitoring
# =============================================================================
FOXHUNT_LOG_LEVEL=info
FOXHUNT_METRICS_ENABLED=true
FOXHUNT_TRACING_ENABLED=true
FOXHUNT_PERFORMANCE_MONITORING=true

# =============================================================================
# Production Security Settings
# =============================================================================
FOXHUNT_ENVIRONMENT=production
FOXHUNT_SECURITY_STRICT_MODE=true
FOXHUNT_TLS_MIN_VERSION=1.3
FOXHUNT_CORS_ENABLED=false