# NOFX Environment Variables Template
# Copy this file to .env and modify the values as needed

# ===========================================
# Server Configuration
# ===========================================

# Backend API server port
NOFX_BACKEND_PORT=8080

# Frontend web interface port
NOFX_FRONTEND_PORT=3000

# Timezone
NOFX_TIMEZONE=Asia/Shanghai

# ===========================================
# Authentication (Required)
# ===========================================

# JWT signing secret (any random string, at least 32 characters)
# Generate with: openssl rand -base64 32
JWT_SECRET=your-jwt-secret-change-this-in-production

# ===========================================
# Encryption Keys (Required)
# ===========================================

# AES-256 data encryption key (Base64 encoded, 32 bytes)
# Used for encrypting sensitive data in database (API keys, secrets)
# Generate with: openssl rand -base64 32
DATA_ENCRYPTION_KEY=your-base64-encoded-32-byte-key

# RSA private key for client-server encryption (PEM format)
# Used for end-to-end encryption of sensitive data from browser
# Generate with: openssl genrsa 2048
# Note: Replace newlines with \n for single-line format
RSA_PRIVATE_KEY=-----BEGIN RSA PRIVATE KEY-----\nYOUR_KEY_HERE\n-----END RSA PRIVATE KEY-----

# ===========================================
# Security Options
# ===========================================

# Transport encryption for API keys (default: false)
# When enabled, browser uses Web Crypto API to encrypt API keys before sending
# Requires HTTPS or localhost to work
# Set to true for enhanced security (HTTPS required)
# Set to false for easier deployment (HTTP/IP access allowed)
TRANSPORT_ENCRYPTION=false

# ===========================================
# Telegram AI Assistant (NEW - moltbot-nofx)
# ===========================================

# Telegram Bot Token (get from @BotFather)
# This enables the AI trading assistant via Telegram
TELEGRAM_BOT_TOKEN=

# Allowed users (comma-separated Telegram user IDs)
# Leave empty to allow all users (not recommended for production)
# Get your ID from @userinfobot
TELEGRAM_ALLOWED_USERS=

# Admin users (comma-separated Telegram user IDs)
# Admins can manage bot settings
TELEGRAM_ADMIN_USERS=

# Rate limit (messages per minute per user)
TELEGRAM_RATE_LIMIT=30

# Default language: "en" or "zh"
TELEGRAM_LANGUAGE=zh

# ===========================================
# AI Model Configuration (for Assistant)
# ===========================================

# DeepSeek (recommended - cost-effective)
DEEPSEEK_API_KEY=
DEEPSEEK_API_URL=
DEEPSEEK_MODEL=deepseek-chat

# Claude (optional alternative)
CLAUDE_API_KEY=
CLAUDE_API_URL=
CLAUDE_MODEL=

# OpenAI (optional alternative)
OPENAI_API_KEY=
OPENAI_API_URL=
OPENAI_MODEL=

# Qwen (optional alternative)
QWEN_API_KEY=
QWEN_API_URL=
QWEN_MODEL=

DB_TYPE=postgres
DB_HOST=10.
DB_PORT=5432
DB_USER=nofx_user
DB_PASSWORD=
DB_NAME=nofx
DB_SSLMODE=disable


# 数据库配置 - SQLite（默认）
DB_TYPE=sqlite
DB_PATH=data/data.db