.env.production•2.65 kB
# Multilead Open API Configuration - PRODUCTION
# ============================================================================
# Required Configuration
# ============================================================================
# Required: Your Multilead API key (PRODUCTION KEY)
# Get your API key from: https://app.multilead.co/settings/api
MULTILEAD_API_KEY=your_production_multilead_api_key_here
# ============================================================================
# Multilead API Settings
# ============================================================================
# Multilead API Base URL
MULTILEAD_BASE_URL=https://api.multilead.co
# Request timeout in seconds (production: 30-60)
MULTILEAD_TIMEOUT=30
# Debug mode (MUST be false in production)
MULTILEAD_DEBUG=false
# ============================================================================
# Server Transport Configuration - PRODUCTION
# ============================================================================
# Transport mode: "http" for production web services
TRANSPORT=http
# HTTP server host (0.0.0.0 for all interfaces)
HOST=0.0.0.0
# HTTP server port
PORT=8000
# ============================================================================
# Logging Configuration - PRODUCTION
# ============================================================================
# Logging level: INFO (recommended for production)
# Options: DEBUG, INFO, WARNING, ERROR, CRITICAL
LOG_LEVEL=INFO
# Logging format: "json" for production (machine-readable, structured)
# Options: "json" (production), "text" (development)
LOG_FORMAT=json
# ============================================================================
# Rate Limiting Configuration - PRODUCTION
# ============================================================================
# Maximum requests per minute per client IP
RATE_LIMIT_PER_MINUTE=100
# Maximum requests per hour per client IP
RATE_LIMIT_PER_HOUR=1000
# ============================================================================
# Production Security Notes
# ============================================================================
# 1. Use production API key (ml_live_...) not development key
# 2. Set MULTILEAD_DEBUG=false
# 3. Use LOG_FORMAT=json for structured logging
# 4. Configure rate limiting based on expected load
# 5. Run behind reverse proxy (nginx/caddy) with SSL/TLS
# 6. Use firewall to restrict access
# 7. Monitor logs for errors and suspicious activity
# 8. Rotate API keys regularly (every 90 days recommended)
# 9. Use secrets manager instead of .env file if possible
# 10. Never commit this file to version control