.env.example

APP_ENV=development
APP_NAME=ila-coding
LOG_LEVEL=INFO
HOST=0.0.0.0
PORT=8000
DB_PATH=data/coding_assistant.db
SECRET_KEY=replace-with-strong-random-secret
JWT_ALGORITHM=HS256
JWT_ISSUER=ila-coding-api
JWT_AUDIENCE=ila-coding-clients
ACCESS_TOKEN_EXPIRE_MINUTES=1440
REFRESH_TOKEN_EXPIRE_DAYS=30
PASSWORD_RESET_TOKEN_EXPIRE_MINUTES=20
OTP_EXPIRE_MINUTES=10
OTP_MAX_ATTEMPTS=5
OTP_COOLDOWN_SECONDS=30
DEV_EXPOSE_OTP=true
PASSWORD_MIN_LENGTH=6
PASSWORD_REQUIRE_UPPER=false
PASSWORD_REQUIRE_LOWER=true
PASSWORD_REQUIRE_DIGIT=true
PASSWORD_REQUIRE_SYMBOL=false
MAX_REQUEST_BODY_BYTES=262144
MAX_CODE_SIZE_BYTES=50000
MAX_RAG_QUESTION_CHARS=2000
RATE_LIMIT_LOGIN_PER_MIN=12
RATE_LIMIT_REGISTER_PER_MIN=6
RATE_LIMIT_FORGOT_PASSWORD_PER_MIN=6
RATE_LIMIT_OTP_VERIFY_PER_MIN=20
RATE_LIMIT_RESET_PASSWORD_PER_MIN=8
RATE_LIMIT_RAG_PER_MIN=30
RATE_LIMIT_JUDGE_PER_MIN=45
JUDGE_TIMEOUT_SECONDS=3
JUDGE_MAX_TEST_CASES=30
JUDGE_MAX_OUTPUT_CHARS=12000
JUDGE_MEMORY_LIMIT_MB=128
JUDGE_RECURSION_LIMIT=2000
CORS_ALLOW_ORIGINS=http://localhost:5173,http://127.0.0.1:5173
CSP_POLICY=default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'
HSTS_ENABLED=false
HSTS_MAX_AGE=31536000
X_FRAME_OPTIONS=DENY
REFERRER_POLICY=strict-origin-when-cross-origin
RAG_ENABLED=true
RAG_MODE=local
RAG_BASE_URL=http://127.0.0.1:8000
RAG_ORG_ID=test_org
RAG_AGENT_ID=default_bot
RAG_SERVICE_TOKEN=
RAG_TIMEOUT_SECONDS=20
RAG_ALLOW_FULL_SOLUTIONS=false
RAG_ENFORCE_HINT_PROGRESSION=true
RAG_THREAD_STATE_MAX=5000
METRICS_ENABLED=true
SLOW_REQUEST_THRESHOLD_MS=1200
DB_SLOW_QUERY_THRESHOLD_MS=120