.env.example

# Loan Origination System Application (LOSA) Configuration
# Copy this file to .env and update the values for your environment

# =============================================================================
# DATABASE CONFIGURATION
# =============================================================================

# Database connection parameters
DB_HOST=localhost
DB_PORT=5432
DB_NAME=losa
DB_USER=losa_user
DB_PASSWORD=losa_password

# SSL configuration (disable, allow, prefer, require, verify-ca, verify-full)
DB_SSL_MODE=disable

# Connection pool settings
DB_POOL_SIZE=10
DB_MAX_OVERFLOW=20
DB_POOL_TIMEOUT=30
DB_POOL_RECYCLE=3600

# Debug mode - set to true to echo SQL queries
DB_ECHO=false

# =============================================================================
# API CONFIGURATION
# =============================================================================

# Server configuration
HOST=0.0.0.0
PORT=8000
DEBUG=false
RELOAD=true

# CORS settings (comma-separated list of allowed origins)
ALLOWED_ORIGINS=http://localhost:3000,http://localhost:8080,https://yourdomain.com

# Trusted hosts (comma-separated list)
TRUSTED_HOSTS=localhost,127.0.0.1,yourdomain.com

# =============================================================================
# LANGCHAIN / AI CONFIGURATION
# =============================================================================

# OpenAI API configuration
OPENAI_API_KEY=your_openai_api_key_here
OPENAI_MODEL=gpt-4
OPENAI_TEMPERATURE=0.1
OPENAI_MAX_TOKENS=2000

# Alternative AI providers (uncomment and configure as needed)
# ANTHROPIC_API_KEY=your_anthropic_api_key_here
# COHERE_API_KEY=your_cohere_api_key_here
# HUGGINGFACE_API_KEY=your_huggingface_api_key_here

# =============================================================================
# WORKFLOW CONFIGURATION
# =============================================================================

# Workflow processing settings
WORKFLOW_TIMEOUT=300
WORKFLOW_RETRY_ATTEMPTS=3
WORKFLOW_ENABLE_HUMAN_REVIEW=true

# Credit check configuration
ENABLE_CREDIT_CHECK=true
CREDIT_SCORE_MINIMUM=580
DTI_RATIO_MAXIMUM=0.43

# Risk assessment thresholds
RISK_SCORE_THRESHOLD_LOW=80
RISK_SCORE_THRESHOLD_MEDIUM=65
RISK_SCORE_THRESHOLD_HIGH=45

# =============================================================================
# EXTERNAL SERVICES
# =============================================================================

# Credit bureau APIs (mock/sandbox URLs for development)
EXPERIAN_API_URL=https://api.experian.com/sandbox
EXPERIAN_API_KEY=your_experian_api_key
EXPERIAN_CLIENT_ID=your_experian_client_id
EXPERIAN_CLIENT_SECRET=your_experian_client_secret

EQUIFAX_API_URL=https://api.equifax.com/sandbox
EQUIFAX_API_KEY=your_equifax_api_key

TRANSUNION_API_URL=https://api.transunion.com/sandbox
TRANSUNION_API_KEY=your_transunion_api_key

# Document processing services
ENABLE_OCR_SERVICE=true
OCR_SERVICE_URL=https://api.ocr-service.com
OCR_API_KEY=your_ocr_api_key

# Email service configuration (for notifications)
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_USERNAME=your_email@gmail.com
SMTP_PASSWORD=your_email_password
SMTP_FROM_EMAIL=noreply@yourdomain.com
SMTP_USE_TLS=true

# =============================================================================
# FILE UPLOAD CONFIGURATION
# =============================================================================

# File upload settings
UPLOAD_DIRECTORY=./uploads
MAX_FILE_SIZE=10485760  # 10MB in bytes
ALLOWED_FILE_TYPES=pdf,jpg,jpeg,png,doc,docx

# File storage (local, s3, gcs)
FILE_STORAGE_TYPE=local

# AWS S3 configuration (if using S3 storage)
AWS_ACCESS_KEY_ID=your_aws_access_key
AWS_SECRET_ACCESS_KEY=your_aws_secret_key
AWS_REGION=us-east-1
S3_BUCKET_NAME=losa-documents

# =============================================================================
# SECURITY CONFIGURATION
# =============================================================================

# JWT configuration (for authentication if implemented)
JWT_SECRET_KEY=your_jwt_secret_key_here_change_in_production
JWT_ALGORITHM=HS256
JWT_EXPIRATION_HOURS=24

# API rate limiting
RATE_LIMIT_REQUESTS_PER_MINUTE=100
RATE_LIMIT_BURST=20

# Encryption key for sensitive data (change in production)
ENCRYPTION_KEY=your_32_character_encryption_key

# =============================================================================
# LOGGING CONFIGURATION
# =============================================================================

# Logging settings
LOG_LEVEL=INFO
LOG_FILE=losa.log
LOG_MAX_SIZE=100MB
LOG_BACKUP_COUNT=5
LOG_FORMAT=%(asctime)s - %(name)s - %(levelname)s - %(message)s

# Enable structured logging (JSON format)
STRUCTURED_LOGGING=false

# Log to external services
LOG_TO_DATADOG=false
DATADOG_API_KEY=your_datadog_api_key

LOG_TO_SENTRY=false
SENTRY_DSN=your_sentry_dsn

# =============================================================================
# MONITORING CONFIGURATION
# =============================================================================

# Health check intervals (seconds)
HEALTH_CHECK_INTERVAL=30
DATABASE_HEALTH_CHECK_TIMEOUT=5

# Metrics collection
ENABLE_METRICS=true
METRICS_PORT=9090

# Application monitoring
ENABLE_APM=false
APM_SERVICE_NAME=losa
APM_ENVIRONMENT=development

# =============================================================================
# DEVELOPMENT CONFIGURATION
# =============================================================================

# Development mode settings
DEVELOPMENT_MODE=true
DEBUG_TOOLBAR=false
RELOAD_ON_CHANGES=true

# Test database (for running tests)
TEST_DB_NAME=losa_test
TEST_DB_USER=losa_test_user
TEST_DB_PASSWORD=losa_test_password

# Mock external services in development
MOCK_CREDIT_BUREAU=true
MOCK_OCR_SERVICE=true
MOCK_EMAIL_SERVICE=true

# =============================================================================
# PRODUCTION CONFIGURATION
# =============================================================================

# Production-specific settings (uncomment for production)
# ENVIRONMENT=production
# DEBUG=false
# RELOAD=false
# DB_ECHO=false
# STRUCTURED_LOGGING=true
# ENABLE_APM=true
# MOCK_CREDIT_BUREAU=false
# MOCK_OCR_SERVICE=false
# MOCK_EMAIL_SERVICE=false

# Load balancer health check path
# HEALTH_CHECK_PATH=/health

# Production database connection with SSL
# DB_SSL_MODE=require
# DB_SSL_CERT=/path/to/client-cert.pem
# DB_SSL_KEY=/path/to/client-key.pem
# DB_SSL_ROOT_CERT=/path/to/ca-cert.pem

# =============================================================================
# FEATURE FLAGS
# =============================================================================

# Feature toggles
ENABLE_ASYNC_PROCESSING=true
ENABLE_DOCUMENT_ANALYSIS=true
ENABLE_AUTOMATED_DECISIONS=true
ENABLE_RISK_MODELING=true
ENABLE_AUDIT_LOGGING=true
ENABLE_NOTIFICATIONS=true

# Experimental features
ENABLE_ML_RISK_SCORING=false
ENABLE_ALTERNATIVE_DATA=false
ENABLE_BLOCKCHAIN_VERIFICATION=false

# =============================================================================
# COMPLIANCE AND AUDIT
# =============================================================================

# Compliance settings
ENABLE_PCI_COMPLIANCE=true
ENABLE_GDPR_COMPLIANCE=true
ENABLE_CCPA_COMPLIANCE=true

# Data retention policies (days)
APPLICATION_DATA_RETENTION_DAYS=2555  # 7 years
AUDIT_LOG_RETENTION_DAYS=2555
DOCUMENT_RETENTION_DAYS=2555

# Audit trail configuration
AUDIT_ALL_CHANGES=true
AUDIT_INCLUDE_FIELD_CHANGES=true
AUDIT_LOG_SENSITIVE_DATA=false

# =============================================================================
# CACHE CONFIGURATION
# =============================================================================

# Redis cache configuration (if using caching)
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=your_redis_password
REDIS_DB=0
REDIS_SSL=false

# Cache settings
CACHE_TTL_SECONDS=3600
ENABLE_QUERY_CACHE=true
ENABLE_API_RESPONSE_CACHE=false