.env.example

# ==============================================================================
# Google Cloud & MongoDB Atlas Environment Variables (MemNexus)
# ==============================================================================
# ⚠️ SECURITY WARNING: Never commit this file with real credentials!
# This is a TEMPLATE - copy to .env and fill in your actual values
# ==============================================================================

# 🛠 Phase 1 & 4: Google Cloud Project Configurations
GCP_PROJECT_ID=your-google-cloud-project-id
GCP_LOCATION=us-central1

# 🧰 Phase 3 & 4: MongoDB Atlas Connection Credentials
# Local testing option (loads directly from environment):
# IMPORTANT: Replace <username> and <password> with your actual MongoDB credentials
MONGODB_URI=mongodb+srv://<username>:<password>@cluster0.xxxx.mongodb.net/?retryWrites=true&w=majority

# Production Secret Manager option (Phase 4 - RECOMMENDED):
# Set to 'true' to pull MONGODB_URI securely from GCP Secret Manager
# This is the MOST SECURE option - credentials never appear in code or environment
USE_SECRET_MANAGER=false
SECRET_ID=mongodb-atlas-uri
SECRET_VERSION=latest

# 🧠 Phase 1: Gemini Model Configuration
GEMINI_MODEL=gemini-2.5-flash

# 🔒 Security: Webhook Authentication
# Set a strong secret to protect webhook endpoint from unauthorized access
# This secret must match the X-Webhook-Secret header sent by clients
# For production: generate with `openssl rand -hex 32`
# For demo/testing: use consistent value (must match app.js)
WEBHOOK_SECRET=sentinelops-demo-webhook-secret-2026