env.example

# Lead Entry Guard — environment variables
# Copy to .env and fill in values. Never commit .env to git.

# Database (Phase 3A)
LEG_DATABASE_URL=postgresql+asyncpg://leg:leg@localhost:5432/leg

# Redis
LEG_REDIS_URL=redis://localhost:6379/0

# Vault
LEG_VAULT_URL=http://localhost:8200
LEG_VAULT_TOKEN=dev-root-token

# App
LEG_ENVIRONMENT=development
LEG_DEBUG=true

# StatsD
LEG_STATSD_HOST=localhost
LEG_STATSD_PORT=8125

# Signal Check — trusted reverse proxy IPs (comma-separated)
# IMPORTANT: only set if you fully control the proxy. Never trust public proxies.
# X-Forwarded-For is ignored when this is empty (fail-safe default).
# Example: LEG_TRUSTED_PROXY_IPS=10.0.0.1,10.0.0.2
LEG_TRUSTED_PROXY_IPS=

# Signal Check — evaluation worker threads (default 1 = sandbox safe)
# WARNING: increasing workers does not extend the timeout budget.
# Review _EVAL_TIMEOUT_SECONDS alongside this value to avoid false timeouts.
# Heuristic for higher traffic: min(32, cpu_count + 4)
# Example: LEG_SIGNAL_CHECK_WORKERS=5
LEG_SIGNAL_CHECK_WORKERS=1