# ============================================================
# TFM aInventory — Backend Environment Variables
# Copy this file to .env and fill in real values.
# NEVER commit the real .env file to Git!
# ============================================================

# --- AI API Keys ---
# Google Gemini API Key (Required for AI label OCR onboarding)
# You can also set this in the root 'inventory.env' for Docker convenience.
GEMINI_API_KEY=your_gemini_api_key_here

# --- Security ---
# JWT secret key — generate a strong random value for production:
#   python3 -c "import secrets; print(secrets.token_urlsafe(64))"
JWT_SECRET_KEY=change-me-generate-a-secure-random-value

# --- CORS & External Access ---
# The system automatically allows localhost and the local LAN IP.
# Use EXTRA_ALLOWED_ORIGINS for Tailscale, VPNs, or FQDNs.
# Example: EXTRA_ALLOWED_ORIGINS=100.78.182.27,inventory.my-domain.com
EXTRA_ALLOWED_ORIGINS=

# --- Data Paths (usually managed by startup scripts) ---
# DATA_DIR=/app/data
# LOGS_DIR=/app/logs