.env.example

# Datastore API — environment template. Copy to `.env` and fill in.
# Every field below maps 1:1 to a field on app.core.config.Config.

# --- Application ---
APP_MESSAGE="Datastore API is running!"
MAX_REQUEST_BODY_MB=50
LOG_LEVEL=INFO

# --- Datastore engine ---
# Selects the storage backend (must match a folder under
# `datastore/infrastructure/engines/`):
#   bigquery       — real BigQuery adapter (placeholder while being built).
#   ducklake       — Future planned.
DATASTORE_ENGINE=bigquery
BIGQUERY_PROJECT=
BIGQUERY_DATASET=
BIGQUERY_CREDENTIALS=
BIGQUERY_CREDENTIALS_RO=
BIGQUERY_USE_QUERY_CACHE=true
BIGQUERY_EXPORT_BUCKET=
BIGQUERY_EXPORT_URL_EXPIRY_HOURS=1
SQL_FUNCTIONS_ALLOW_FILE=

# --- Auth ---
# AUTH_TYPE selects the provider (folder under `datastore/auth/`):
#   ckan       — CKAN /api/3/action/datastore_authorize (uses CKAN_URL below).
#   jwt        — verify JWT against JWT_SECRET or JWT_PUBLIC_KEY (see below).
#   anonymous  — always allow, no identity. Use for local dev / CI.
AUTH_TYPE=ckan
AUTH_CACHE_TTL=10

# CKAN — required when AUTH_TYPE=ckan.
CKAN_URL=
HTTP_TIMEOUT_SECONDS=10

# JWT — required when AUTH_TYPE=jwt. HS* uses JWT_SECRET; RS*/ES* uses JWT_PUBLIC_KEY.
JWT_ALGORITHM=HS256
JWT_SECRET=
JWT_PUBLIC_KEY=
JWT_AUDIENCE=
JWT_ISSUER=

# --- System columns + search ---
# Toggle the per-row `_updated_at` TIMESTAMP system column. False = `_id` only.
INCLUDE_UPDATED_AT=true
# Hard cap on `datastore_search` / `datastore_search_sql` `limit`. Requests
# above this return 400. Raise this only when downstream clients can stream.
SEARCH_RESULT_ROWS_MAX=32000

# --- Cache ---
# Empty REDIS_URL keeps the in-process InMemoryCache (single-pod only).
REDIS_URL=