env.example

# AgentCare Platform Environment Configuration
# Copy this file to .env and update with your values

# ================================
# Application Configuration
# ================================
NODE_ENV=development
PORT=3000
API_VERSION=v1
APP_NAME=AgentCare
APP_URL=http://localhost:3000

# ================================
# Database Configuration
# ================================
DATABASE_URL=postgresql://agentcare:agentcare_dev@localhost:5432/agentcare_dev
DATABASE_HOST=localhost
DATABASE_PORT=5432
DATABASE_NAME=agentcare_dev
DATABASE_USER=agentcare
DATABASE_PASSWORD=agentcare_dev
DATABASE_SSL=false
DATABASE_POOL_MIN=2
DATABASE_POOL_MAX=10
DATABASE_TIMEOUT=30000

# Test Database Configuration
TEST_DATABASE_URL=postgresql://agentcare:agentcare_dev@localhost:5432/agentcare_test

# ================================
# Redis Configuration (Optional)
# ================================
REDIS_URL=redis://localhost:6379
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=
REDIS_DB=0
REDIS_TTL=3600

# ================================
# Authentication & Security
# ================================
JWT_SECRET=your-super-secret-jwt-key-change-in-production-256-chars-long
JWT_EXPIRES_IN=24h
JWT_REFRESH_EXPIRES_IN=7d
JWT_ISSUER=agentcare
JWT_AUDIENCE=agentcare-users

# Password Hashing
BCRYPT_ROUNDS=12

# Rate Limiting
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=1000
RATE_LIMIT_MAX_REQUESTS_PER_IP=100

# ================================
# CORS Configuration
# ================================
CORS_ORIGIN=http://localhost:3000,http://localhost:3001
CORS_CREDENTIALS=true
CORS_METHODS=GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS
CORS_ALLOWED_HEADERS=Content-Type,Authorization,X-Organization-Context

# ================================
# Logging Configuration
# ================================
LOG_LEVEL=debug
LOG_FORMAT=combined
LOG_FILE_ENABLED=true
LOG_FILE_PATH=./logs/agentcare.log
LOG_ERROR_FILE=./logs/error.log
LOG_ACCESS_FILE=./logs/access.log
LOG_SQL_QUERIES=false
LOG_REQUEST_BODY=false

# ================================
# Email Configuration (Optional)
# ================================
SMTP_HOST=smtp.mailtrap.io
SMTP_PORT=2525
SMTP_SECURE=false
SMTP_USER=your_mailtrap_user
SMTP_PASSWORD=your_mailtrap_password
EMAIL_FROM=noreply@agentcare.local
EMAIL_FROM_NAME=AgentCare Platform

# Production Email Settings (SendGrid/AWS SES)
# SMTP_HOST=smtp.sendgrid.net
# SMTP_PORT=587
# SMTP_USER=apikey
# SMTP_PASSWORD=your_sendgrid_api_key

# ================================
# AWS Configuration (Optional)
# ================================
AWS_REGION=us-west-2
AWS_ACCESS_KEY_ID=your_aws_access_key
AWS_SECRET_ACCESS_KEY=your_aws_secret_key
S3_BUCKET=agentcare-dev-uploads
S3_ENDPOINT=
S3_FORCE_PATH_STYLE=false

# ================================
# Monitoring & Metrics
# ================================
ENABLE_METRICS=true
METRICS_PORT=9090
ENABLE_HEALTH_CHECKS=true
HEALTH_CHECK_INTERVAL=30000

# Error Tracking (Sentry)
SENTRY_DSN=
SENTRY_ENVIRONMENT=development
SENTRY_TRACES_SAMPLE_RATE=0.1

# ================================
# Multi-Tenant Configuration
# ================================
DEFAULT_TENANT_SLUG=demo-hospital
TENANT_ISOLATION_STRICT=true
TENANT_CACHE_TTL=3600
TENANT_SUBDOMAIN_ENABLED=false
TENANT_CUSTOM_DOMAINS=false

# ================================
# AI/LLM Configuration (Optional)
# ================================
OPENAI_API_KEY=your_openai_api_key
ANTHROPIC_API_KEY=your_anthropic_api_key
AI_MODEL_PROVIDER=openai
AI_DEFAULT_MODEL=gpt-4
AI_MAX_TOKENS=2000
AI_TEMPERATURE=0.7

# Ollama Configuration (Local LLM)
OLLAMA_BASE_URL=http://localhost:11434
OLLAMA_MODEL=qwen2.5:latest
OLLAMA_TIMEOUT=30000

# Ollama Startup Retry Configuration
OLLAMA_STARTUP_MAX_RETRIES=5
OLLAMA_STARTUP_BASE_DELAY=2000
OLLAMA_STARTUP_MAX_DELAY=30000
OLLAMA_AUTO_PULL_MODEL=true

# ================================
# Feature Flags
# ================================
ENABLE_SWAGGER_UI=true
ENABLE_API_RATE_LIMITING=true
ENABLE_AUDIT_LOGGING=true
ENABLE_BULK_OPERATIONS=true
ENABLE_WEBSOCKETS=false
ENABLE_CACHING=true
ENABLE_COMPRESSION=true

# ================================
# HIPAA & Compliance
# ================================
HIPAA_COMPLIANT=true
AUDIT_TRAIL_ENABLED=true
DATA_ENCRYPTION_ENABLED=true
DATA_RETENTION_DAYS=2555  # 7 years for HIPAA
ANONYMIZATION_ENABLED=true

# ================================
# Healthcare Specific
# ================================
MEDICAL_RECORD_PREFIX=MR
APPOINTMENT_BOOKING_WINDOW_DAYS=90
PROVIDER_LICENSE_VALIDATION=true
INSURANCE_VERIFICATION_ENABLED=false

# ================================
# Development Tools
# ================================
# Development only - disable in production
ENABLE_DEV_MIDDLEWARE=true
ENABLE_MOCK_DATA=true
SKIP_AUTH_FOR_TESTING=false

# API Documentation
SWAGGER_UI_PATH=/api/docs
SWAGGER_JSON_PATH=/api/docs.json

# ================================
# Performance Configuration
# ================================
# Request timeout (milliseconds)
REQUEST_TIMEOUT=30000

# Body parsing limits
BODY_LIMIT=10mb
JSON_LIMIT=1mb
URL_ENCODED_LIMIT=1mb

# Connection pool settings
CONNECTION_POOL_SIZE=10
CONNECTION_TIMEOUT=5000

# ================================
# Session Configuration
# ================================
SESSION_SECRET=your-session-secret-change-in-production
SESSION_MAX_AGE=86400000  # 24 hours
SESSION_SECURE=false  # Set to true in production with HTTPS
SESSION_SAME_SITE=lax

# ================================
# File Upload Configuration
# ================================
UPLOAD_MAX_FILE_SIZE=10485760  # 10MB
UPLOAD_ALLOWED_TYPES=image/jpeg,image/png,application/pdf
UPLOAD_DESTINATION=./uploads
UPLOAD_TEMP_DIR=./tmp

# ================================
# Backup Configuration
# ================================
BACKUP_ENABLED=true
BACKUP_SCHEDULE=0 2 * * *  # Daily at 2 AM
BACKUP_RETENTION_DAYS=30
BACKUP_S3_BUCKET=agentcare-backups

# ================================
# Notification Configuration
# ================================
NOTIFICATION_ENABLED=true
NOTIFICATION_CHANNELS=email,sms
SMS_PROVIDER=twilio
TWILIO_ACCOUNT_SID=your_twilio_account_sid
TWILIO_AUTH_TOKEN=your_twilio_auth_token
TWILIO_PHONE_NUMBER=+1234567890

# ================================
# Analytics Configuration
# ================================
ANALYTICS_ENABLED=true
GOOGLE_ANALYTICS_ID=
MIXPANEL_TOKEN=
HOTJAR_ID=

# ================================
# Webhook Configuration
# ================================
WEBHOOK_ENABLED=true
WEBHOOK_SECRET=your-webhook-secret
WEBHOOK_TIMEOUT=10000

# ================================
# Integration Configuration
# ================================
# Third-party integrations
STRIPE_PUBLISHABLE_KEY=
STRIPE_SECRET_KEY=
PAYPAL_CLIENT_ID=
PAYPAL_CLIENT_SECRET=

# HL7 FHIR Configuration
FHIR_SERVER_URL=
FHIR_CLIENT_ID=
FHIR_CLIENT_SECRET=

# ================================
# Testing Configuration
# ================================
TEST_TIMEOUT=30000
TEST_DATABASE_URL=postgresql://agentcare:agentcare_dev@localhost:5432/agentcare_test
JEST_WORKERS=50%

# ================================
# Production Overrides
# ================================
# These should be set in production environment
# NODE_ENV=production
# LOG_LEVEL=info
# LOG_FORMAT=json
# ENABLE_SWAGGER_UI=false
# ENABLE_DEV_MIDDLEWARE=false
# ENABLE_MOCK_DATA=false
# DATABASE_SSL=true
# SESSION_SECURE=true
# CORS_ORIGIN=https://yourdomain.com
# JWT_SECRET=your-super-strong-production-secret

# ================================
# Docker Configuration
# ================================
COMPOSE_PROJECT_NAME=agentcare
COMPOSE_FILE=docker-compose.yml
DOCKER_BUILDKIT=1