ENVIRONMENT=dev
LOG_LEVEL=INFO
LOG_FORMAT=text
LOG_USE_UTC=false
REQUEST_LOG_SLOW_MS=1000
REQUEST_LOG_INCLUDE_HEALTH=false
DATABASE_URL=postgresql+psycopg://postgres:postgres@localhost:5432/pipeline
# Origins the browser is allowed to call the API from.
# Must match the URL you open Pipeline on in your browser — not the Forgejo URL.
# For local dev: http://localhost:3000
# For a deployed instance: https://pipeline.example.com
# Multiple origins: comma-separated — e.g. https://pipeline.example.com,http://localhost:3000
# Leave blank to disable CORS headers (only safe when frontend and backend share the same origin).
CORS_ORIGINS=http://localhost:3000
# REQUIRED for gateway provisioning/agent heartbeats. Must be reachable by gateway runtime.
BASE_URL=
# Security response headers (blank values disable each header).
SECURITY_HEADER_X_CONTENT_TYPE_OPTIONS=
SECURITY_HEADER_X_FRAME_OPTIONS=
SECURITY_HEADER_REFERRER_POLICY=
SECURITY_HEADER_PERMISSIONS_POLICY=

# Auth mode: clerk or local.
AUTH_MODE=local
# REQUIRED when AUTH_MODE=local (must be non-placeholder and at least 50 chars).
LOCAL_AUTH_TOKEN=
# Clerk (auth only; used when AUTH_MODE=clerk)
CLERK_SECRET_KEY=
CLERK_API_URL=https://api.clerk.com
CLERK_VERIFY_IAT=true
CLERK_LEEWAY=10.0
# Database
DB_AUTO_MIGRATE=false
# Generic RQ queue / dispatch settings
RQ_REDIS_URL=redis://localhost:6379/0
RQ_QUEUE_NAME=default
RQ_DISPATCH_THROTTLE_SECONDS=15.0
RQ_DISPATCH_MAX_RETRIES=3
# Forgejo issue cache scheduled sync
FORGEJO_SYNC_ENABLED=true
FORGEJO_SYNC_INTERVAL_SECONDS=3600
FORGEJO_SYNC_STARTUP_DELAY_SECONDS=60
GATEWAY_MIN_VERSION=2026.02.9