.env.example

# Development-only values. Copy to .env; never commit real credentials.
POSTGRES_SUPERUSER_PASSWORD=change-me
IDENTITY_DB_PASSWORD=change-me
TENANT_DB_PASSWORD=change-me
USERS_DB_PASSWORD=change-me
QBANK_DB_PASSWORD=change-me
ASSESSMENT_DB_PASSWORD=change-me
SUBMISSION_DB_PASSWORD=change-me
SEB_DB_PASSWORD=change-me
NOTIFICATION_DB_PASSWORD=change-me
ANALYTICS_DB_PASSWORD=change-me
JUDGE_WRAPPER_DB_PASSWORD=change-me
JUDGE0_DB_PASSWORD=change-me
RABBITMQ_DEFAULT_USER=judge
RABBITMQ_DEFAULT_PASS=change-me
MINIO_ROOT_USER=local-minio
MINIO_ROOT_PASSWORD=change-me

# Object storage — question-bank (MinIO dev / S3 production)
QBANK_STORAGE_ENDPOINT=localhost:9000
QBANK_STORAGE_ACCESS_KEY=local-minio
QBANK_STORAGE_SECRET_KEY=change-me
QBANK_STORAGE_BUCKET=aethercode-qbank
QBANK_STORAGE_USE_SSL=false
QBANK_STORAGE_REGION=

# Object storage — SEB (MinIO dev / S3 production)
SEB_STORAGE_ENDPOINT=localhost:9000
SEB_STORAGE_ACCESS_KEY=local-minio
SEB_STORAGE_SECRET_KEY=change-me
SEB_STORAGE_BUCKET=aethercode-seb
SEB_STORAGE_USE_SSL=false
SEB_STORAGE_REGION=

# Object storage — submission (MinIO dev / S3 production)
SUBMISSION_STORAGE_ENDPOINT=localhost:9000
SUBMISSION_STORAGE_ACCESS_KEY=local-minio
SUBMISSION_STORAGE_SECRET_KEY=change-me
SUBMISSION_STORAGE_BUCKET=aethercode-submission
SUBMISSION_STORAGE_USE_SSL=false
SUBMISSION_STORAGE_REGION=

# KMS — local AES-256-GCM (dev/CI only; use managed KMS in production)
# Generate with: openssl rand -base64 32
QBANK_KMS_LOCAL_KEY=<32-bytes-base64>
SEB_KMS_LOCAL_KEY=<32-bytes-base64>
SUBMISSION_KMS_LOCAL_KEY=<32-bytes-base64>

# Observability (OpenTelemetry)
OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4318
OTEL_TRACES_SAMPLER_ARG=1.0