.env-example

# MongoDB Configuration
#MONGOURI = MONGO Key
MONGO_URI=mongodb://mongoadmin:secret@127.0.0.1:27017/biocbot-dev?authSource=admin
# Server Configuration
TLEF_BIOCBOT_PORT=8050

# Local CWL/SAML Configuration (docker-simple-saml on port 8080)
# These values match docker-simple-saml's existing tlef-biocbot SP entry.
SAML_ISSUER=https://tlef-biocbot
SAML_CALLBACK_URL=http://localhost:8050/auth/saml/callback
SAML_ENTRY_POINT=http://localhost:8080/simplesaml/saml2/idp/SSOService.php
SAML_LOGOUT_URL=http://localhost:8080/simplesaml/saml2/idp/SingleLogoutService.php
SAML_METADATA_URL=http://localhost:8080/simplesaml/saml2/idp/metadata.php
SAML_CERT_PATH=/absolute/path/to/docker-simple-saml/cert/server.crt
SAML_ENVIRONMENT=STAGING
ENABLE_SLO=true
ENABLE_LOCAL_SAML_ALIASES=true

# Environment
NODE_ENV=development
QDRANT_URL=http://localhost:6333

# Student chat field-level encryption (first rollout: chat_sessions.chatData)
# Keep disabled until BIOCBOT_CHAT_ENCRYPTION_KEY is supplied from a secret
# store. Generate a new, dedicated key with:
# node -e "console.log(require('node:crypto').randomBytes(32).toString('base64'))"
# Do not reuse BIOCBOT_KEY_ENCRYPTION_SECRET or store this key with DB backups.
BIOCBOT_CHAT_ENCRYPTION_ENABLED=false
# BIOCBOT_CHAT_ENCRYPTION_KEY=your-dedicated-32-byte-base64-key
BIOCBOT_CHAT_ENCRYPTION_READ_POLICY=mixed
BIOCBOT_CHAT_ENCRYPTION_QUERY_POLICY=mixed

EMBEDDING_PROVIDER=ubc-genai-toolkit-llm

# LLM Provider Configuration
# Choose one: ollama, openai, ubc-llm-sandbox, or ubc-llm-proxy
LLM_PROVIDER=ollama

# Ollama Configuration (for local development)
OLLAMA_ENDPOINT=http://localhost:11434
OLLAMA_MODEL=llama3.1
LLM_API_KEY=nokey
LLM_ENDPOINT=http://localhost:11434
LLM_EMBEDDING_MODEL=nomic-embed-text

# OpenAI Configuration (for when you want to switch)
# Course and bucket OpenAI keys are entered in the app and encrypted with this
# stable server-only secret. Generate with: openssl rand -base64 32
# BIOCBOT_KEY_ENCRYPTION_SECRET=your-32-byte-base64-secret
# OPENAI_API_KEY is optional and only used for legacy/global startup paths.
# OPENAI_API_KEY=your-openai-api-key-here
# OPENAI_MODEL=gpt-4o-mini
# LLM_EMBEDDING_MODEL=text-embedding-3-small

# UBC LLM Sandbox Configuration (for production later)
# LLM_PROVIDER=ubc-llm-sandbox
# LLM_API_KEY=your-ubc-sandbox-api-key
# LLM_ENDPOINT=https://ai-stg.apps.ctlt.ubc.ca/v1
# LLM_DEFAULT_MODEL=qwen3.6-35b-a3b
# LLM_EMBEDDING_MODEL=qwen3-embedding-0.6b
# QDRANT_VECTOR_SIZE=1024

# UBC LLM Proxy Configuration
# Keys are saved separately for each course, Super Course bucket, notes, and
# instructor Super Course chat. The endpoint is deployment infrastructure.
# Staging:
# UBC_LLM_PROXY_ENDPOINT=https://ai-stg.apps.ctlt.ubc.ca/v1
# Production:
# UBC_LLM_PROXY_ENDPOINT=https://ai.apps.ctlt.ubc.ca/v1
# Optional only for legacy/global startup paths; normal runtime uses surface keys.
# UBC_LLM_PROXY_API_KEY=your-ubc-llm-proxy-api-key

CHUNK_SIZE=1000
CHUNK_OVERLAP=200
CHUNK_MIN=100

QDRANT_KEY=super-secret-dev-key

# UBC Academic API course-list sync
# Local fake: start /Users/maziyardowlatabadibazaz/academic_api_fake on port 3689,
# then leave mock mode enabled. Staging/prod: unset UBC_API_USE_MOCK and provide
# real Mulesoft credentials with the appropriate UBC_API_ENV.
UBC_API_USE_MOCK=true
UBC_API_MOCK_BASE_URL=http://localhost:3689
UBC_API_CLIENT_ID=mock-client
UBC_API_CLIENT_SECRET=mock-secret
UBC_API_ENV=dev
UBC_API_DEFAULT_CAMPUS=V
# The default local instructor/student accounts are seeded with fake API PUIDs
# so local behavior still follows the live path: authenticated user PUID -> Academic API.
# Optional fallback when the frontend has not supplied an academicPeriod.
# UBC_API_CURRENT_ACADEMIC_PERIOD=AP-2024W1

# Optional Moodle integration
MOODLE_DOMAIN=http://localhost:9200
MOODLE_TOKEN_COLLECTION_NAME=lms_moodle_tokens