# IRIS - Environment Configuration Template
# Database Configuration
DATABASE_URL=postgresql://username:password@localhost:5432/iris_db
REDIS_URL=redis://localhost:6379/0
# MCP Server Database Connection (for API key authentication)
# Use Docker service name when running in containers (e.g., swissknife-postgres)
# Use localhost when running locally
DB_HOST=localhost
DB_PORT=5432
DB_NAME=iris_db
DB_USER=postgres
DB_PASSWORD=postgres
# Telegram Bot
TELEGRAM_BOT_TOKEN=your_telegram_bot_token_here
TELEGRAM_WEBHOOK_URL=https://your-domain.com/webhook/telegram
# Microsoft Graph API
MICROSOFT_CLIENT_ID=your_microsoft_client_id
MICROSOFT_CLIENT_SECRET=your_microsoft_client_secret
MICROSOFT_TENANT_ID=your_microsoft_tenant_id
MICROSOFT_REDIRECT_URI=https://your-domain.com/auth/microsoft/callback
# Google APIs
GOOGLE_CLIENT_ID=your_google_client_id
GOOGLE_CLIENT_SECRET=your_google_client_secret
GOOGLE_REDIRECT_URI=https://your-domain.com/auth/google/callback
# Apple Calendar (CalDAV)
APPLE_CALDAV_URL=https://caldav.icloud.com
APPLE_USERNAME=your_apple_id
APPLE_APP_PASSWORD=your_apple_app_specific_password
# LLM Configuration
OPENAI_API_KEY=your_openai_api_key
ANTHROPIC_API_KEY=your_anthropic_api_key
LLM_PROVIDER=openai # or anthropic
# MCP Servers Configuration
# IRIS MCP Server (Microsoft 365 integration: email, calendar, teams, users, booking)
# Required for TrustySign and other agents to communicate with MCP server
# Generate API key using: docker exec iris-app python3 scripts/generate_mcp_key.py generate --name "Your App" --user "your@email.com"
IRIS_MCP_URL=http://localhost:8001/mcp
IRIS_MCP_API_KEY=your_iris_mcp_api_key_here
# Infocert MCP Server (Digital signature)
INFOCERT_MCP_URL=https://mcp.uat.brainaihub.tech/digital-signature/sse
INFOCERT_MCP_API_KEY=your_infocert_mcp_api_key
# Security
JWT_SECRET_KEY=your_jwt_secret_key_here
JWT_ALGORITHM=HS256
JWT_EXPIRATION_HOURS=24
# Application Settings
DEBUG=false
LOG_LEVEL=INFO
ENVIRONMENT=production # development, staging, production
# Public URLs (used for generating links)
BASE_URL=https://trustypa.brainaihub.tech
ATTACHMENTS_BASE_URL=https://trustypa.brainaihub.tech/iris/attachments
BOOKING_BASE_URL=https://trustypa.brainaihub.tech/booking
OAUTH_REDIRECT_URI=https://trustypa.brainaihub.tech/oauth/callback
# Rate Limiting
RATE_LIMIT_PER_MINUTE=60
RATE_LIMIT_PER_HOUR=1000
# Webhook Security
WEBHOOK_SECRET=your_webhook_secret_here
# Monitoring & Analytics
SENTRY_DSN=your_sentry_dsn_here
ANALYTICS_ENABLED=true
# Cache Settings
CACHE_TTL_SECONDS=3600
EMAIL_CACHE_TTL_SECONDS=1800
CALENDAR_CACHE_TTL_SECONDS=900
# Document Storage
DOCUMENT_STORAGE_PATH=./data/documents
DOCUMENT_RETENTION_DAYS=90