.env.example

GITHUB_TOKEN=ghp_YOUR_TOKEN_HERE
HOST_CERTS_DIR=/path/to/your/certificates

# Optional runtime settings used by docker-compose
ACCOUNT_TYPE=enterprise
GITHUB_TOKEN=ghp_YOUR_TOKEN_HERE

# Rate limiting settings (optional - if not set, no rate limiting is applied)
# RATE_LIMIT_API=10r/s           # API endpoint rate limit (e.g., 10r/s, 100r/m)
# RATE_LIMIT_API_BURST=20        # API burst size (default: 20)
# RATE_LIMIT_AUTH=5r/m           # Auth endpoint rate limit (e.g., 5r/m)
# RATE_LIMIT_AUTH_BURST=10       # Auth burst size (default: 10)

# API key settings for the simple verifier service (verifier.py)
# Provide at least one of these keys. `API_KEY` will be accepted.
API_KEY=
API_KEYS=

# When running with docker-compose, the verifier service expects a host path
# and a container path for the API keys file. Compose mounts the host file into
# the container using these two variables.
# Path on the host machine to the API keys file (used by docker-compose volumes)
API_KEYS_FILE_HOST=/path/to/api_keys.txt
# Path inside the verifier container where the API keys file will be mounted
API_KEYS_FILE_CONTAINER=/app/verifier/api_keys.txt

# JWT and JWKS settings
JWKS_URL=                        # Optional HTTPS URL to fetch JWKS from
JWKS_TTL=300                     # Time-to-live for cached remote JWKS in seconds
JWT_TTL=3600                     # Token time-to-live in seconds for JWT tokens
JWT_AUDIENCE=                    # Optional audience claim for JWT tokens
JWT_ISSUER=                      # Optional issuer claim for JWT tokens

# Example API_KEYS_FILE_HOST format:
# alice:$2b$12$wV...   (bcrypt hash of alice's key)
# bob:$2b$12$7Q...
# plainkey123