# Charybdis Environment Variables
# ================================
#
# PREFERRED: Use config.toml for configuration (copy from config.toml.example)
# Environment variables are used ONLY when referenced in config.toml with ${VAR_NAME}
# or when config.toml is not present (legacy mode)
#
# See config.toml.example for the recommended configuration approach

# Database Connection (Required)
# ===============================
# Used in config.toml as: url = "${DATABASE_URL}"
DATABASE_URL=postgresql://charybdis:CHANGE_ME@localhost:5432/charybdis

# Logging Configuration
# =====================
RUST_LOG=info,charybdis=debug

# API Keys and Secrets (for plugins)
# ===================================
# These should NEVER be stored in config.toml
# Reference them in config.toml using ${VARIABLE_NAME}

# DefectDojo API Key (if using DefectDojo plugin)
# DEFECTDOJO_API_KEY=your-secret-api-key

# Dependency-Track API Key (if using Dependency-Track plugin)
# DEPENDENCYTRACK_API_KEY=your-secret-api-key

# LEGACY: Direct Environment Variable Configuration
# ==================================================
# The following variables are only used if config.toml is not found
# We recommend using config.toml instead for better organization

# Server Configuration
# GRPC_HOST=[::1]
# GRPC_PORT=50051

# OpenTelemetry
# OTEL_SERVICE_NAME=charybdis
# OTEL_SERVICE_VERSION=0.1.0
# OTEL_ENABLE_CONSOLE=true
# ENVIRONMENT=development

# Security (mTLS + RBAC)
# SECURITY_MTLS_ENABLED=false
# SECURITY_MTLS_SERVER_CERT=./certs/server-cert.pem
# SECURITY_MTLS_SERVER_KEY=./certs/server-key.pem
# SECURITY_MTLS_CLIENT_CA=./certs/ca.pem
# SECURITY_RBAC_ENABLED=false