.env.example

# Local + staging env config for course-gen-codex.
#
# Copy to `.env` and override any placeholder before bringing up the
# stack on staging. The defaults are for offline dev only and MUST NOT
# be used on a public host.

# Postgres credentials. Overridden into docker-compose.yml via the
# POSTGRES_* env vars below. Both compose and the app read from them.
POSTGRES_DB=course_gen
POSTGRES_USER=course_gen
POSTGRES_PASSWORD=course_gen

# Bind address for the host-side Postgres publish. Loopback by default —
# only the app on the same host reaches the DB. Override only for CI
# docker-in-docker workflows.
POSTGRES_LISTEN_ADDR=127.0.0.1

# App-side connection string. Must match POSTGRES_USER/PASSWORD/DB above.
DATABASE_URL=postgresql+psycopg://course_gen:course_gen@localhost:5435/course_gen

# Session signing key. UUID session ids are server-side authoritative,
# so this currently isn't used to sign cookies, but operators should
# still rotate it on staging.
SESSION_SECRET=change-me-in-production

# Cookie security. `true` on staging/prod (requires HTTPS terminator).
SESSION_COOKIE_SECURE=false

# bcrypt rounds for password hashing.
AUTH_BCRYPT_COST=12

# Default port for the FastAPI app. Override with --port to uvicorn.
COURSE_GEN_PORT=8040

# Require an LLM judge for outcome-mode submit. `true` on staging/prod
# (fail closed if router unavailable). `false` for offline dev / CI
# where the abstain-as-pass behavior is acceptable.
COURSE_GEN_REQUIRE_LLM_JUDGE=true